[Freeipa-users] Unspecified GSS failure. Minor code may provide more information KDC has no support for encryption type

[tarak sinha]

Hi Team,

I am getting below error while trying to ssh my host without password.

Unspecified GSS failure. Minor code may provide more information KDC has no
support for encryption type

Thanks in advance

*Thanks,*

*Tarak Nath Sinha*

[Sumit Bose]

Post by tarak sinha
Hi Team,
I am getting below error while trying to ssh my host without password.
Unspecified GSS failure. Minor code may provide more information KDC has no
support for encryption type

Where do you see this error, on the client where you call ssh or in the
logs on the host you try to log in to? Are you using IPA user or do you
use trust and AD users from a trusted domain?

Do you see any related messages in the KDC logs?

bye,
Sumit

Post by tarak sinha
Thanks in advance
*Thanks,*
*Tarak Nath Sinha*
--
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

[tarak sinha]

Hi Team,

My other node's are working fine. It's not asking any password. Please let
me know to fix this issue. thanks to reach out me
Here it is output from working node:---

debug1: Authentications that can continue: publickey,gssapi-with-mic,
password
debug1: Next authentication method: gssapi-with-mic
debug1: Delegating credentials
debug1: Delegating credentials
debug1: Authentication succeeded (gssapi-with-mic).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
Last login: Wed Jan 4 07:31:27 2017 from 10.229.67.109

###########################

logs from failure node while do ssh

ebug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure. Minor code may provide more information
KDC has no support for encryption type

debug1: Unspecified GSS failure. Minor code may provide more information
KDC has no support for encryption type

debug1: Unspecified GSS failure. Minor code may provide more information


debug1: Authentications that can continue: publickey,gssapi-with-mic,
password
debug1: Next authentication method: publickey
debug1: Offering public key: /uhome/tsinha/.ssh/id_rsa
debug1: Authentications that can continue: publickey,gssapi-with-mic,
password
debug1: Trying private key: /uhome/tsinha/.ssh/id_dsa
debug1: Trying private key: /uhome/tsinha/.ssh/id_ecdsa
debug1: Next authentication method: password


@@@@@@@@@@@@@@@


Thanks,

Tarak

It showing below encryption type..
Etype (skey, tkt): AES-256 CTS mode with 96-bit SHA-1 HMAC, AES-256 CTS
mode with 96-bit SHA-1 HMAC

Hi Sumit.
I am getting this error on host .

In which log file do you see the message? Can you send the full message
and a bit of context from the log file?
What encryption types does 'klist -k -e' show for the host key on the
host? What encryption types does 'klist -e' show on the client after
calling ssh?
bye,
Sumit

Thanks

Post by Sumit Bose

Post by tarak sinha
Hi Team,
I am getting below error while trying to ssh my host without

password.

Post by Sumit Bose

Post by tarak sinha
Unspecified GSS failure. Minor code may provide more information

KDC has

Post by Sumit Bose
no

Post by tarak sinha
support for encryption type

Where do you see this error, on the client where you call ssh or in

the

Post by Sumit Bose
logs on the host you try to log in to? Are you using IPA user or do

you

Post by Sumit Bose
use trust and AD users from a trusted domain?
Do you see any related messages in the KDC logs?
bye,
Sumit

Post by tarak sinha
Thanks in advance
*Thanks,*
*Tarak Nath Sinha*
--
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

--
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

--
*Thanks,*
*Tarak Nath Sinha*
*Mobile: **[phone]*

--
*Thanks,*
*Tarak Nath Sinha*
*Mobile: **[phone]*

--
*Thanks,*

*Tarak Nath Sinha*

*Mobile: **[phone]*