Comment 6 for bug 2053146

Revision history for this message
ake sandgren (ake-sandgren) wrote :

We have this in sshd_config
===
Match User root
        GSSAPIAuthentication yes
        PasswordAuthentication no
        KbdInteractiveAuthentication no
        PubkeyAuthentication no
        AuthenticationMethods gssapi-keyex gssapi-with-mic
===

Grab a kerberos root ticket and do ssh as root to a node with that config, it will spew out
===
error: Disabled method "gssapi-keyex" in AuthenticationMethods list "gssapi-keyex"
Authentication methods list "gssapi-keyex" contains disabled method, skipping
===
in the syslog.

It's as simple as I can make it.

But as I said before, this is an obvious bug in the patch since it hasn't been updated to match the change in auth.h