[Bug 268186] Kerberos authentication fails with a Linux/FreeIPA KDC

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 20 Dec 2022 21:53:41 UTC

--- Comment #36 from Cy Schubert <cy@FreeBSD.org> ---
Then the only option I have is to try and get a copy of FreeIPA, deploy it here
and try to reproduce your problem here. While my MIT KDC built from the port
works and theirs doesn't, I will need to deploy it here.

One more thought, as you're a binary package user, can you try the
openssh-portable-gssapi package. Simply pkg install openssh-porable-gssapi.
Then add sshd_program="/usr/local/sbin/sshd" to rc.conf and restart sshd. This
is another means to prove that Heimdal is likely the cause.
openssh-portable-gssapi is linked using MIT libraries instead of the Heimdal
libraries in the base O/S.

You are receiving this mail because:
You are the assignee for the bug.