DavidDecotigny

Blog-20100502121723-info

Navigation

  • Rechercher un mot :

CERN SSH GSSApi in Lucid


Having upgraded my box to Lucid, I noticed that my local krb5 credentials were not forwarded to the CERN ssh servers (lxplus). I could be authenticated Ok on the CERN servers but I did not acquire any AFS token on it. The thing is that it used to work in karmic...
After having identified that the problem was related to the krb5 1.8 package (libgssapi-krb5-2, libkrb5-3, libk5crypto3 involved) and having started to file a bug report, launchpad pointed me to this post... This solved my problem ! Simply specifying the following in /etc/krb5.conf:
[libdefaults]
        allow_weak_crypto = true

... fixed the issue.