Kerberos and SSH keys aren’t playing nice

[frijole]

Hi. My name is Ian, and I have a problem.

Many of my users have password-less SSH keypairs set up for logging into some of our lab machines without needing to enter a password. All fine and dandy. Except recently, someone discovered that if they didn’t have a kerberos ticket on their local machine, and attempted to SSH in, it would disregard their keypair, and ask for a password. If they have a kerberos ticket, though, it goes through.

I’ve reproduced it several times with many user accounts, but all our machines are running 10.4.7, so I don’t know if it is unique to that. I’ve also tested it with password-less keypairs for other servers outside out network, and even without a ticket, SSH logins work properly.

Any ideas?

Thanks in advance,
~ian

[Author]

Posts