Wednesday, December 7, 2011

my solaris 9 zone is a punk

i have a love/hate relationship with my non-enterprise use of zones to emulate a lot of solaris instances. i do.
 
# ssh host
unable to initialize mechanism library [/usr/lib/gss/gl/mech_krb5.so]

excuse me?

workaround:
Edit /etc/ssh/ssh_config and add the following

Host *
StrictHostKeyChecking no
GSSAPIKeyExchange no
GSSAPIAuthentication no

Edit /etc/ssh/sshd_config and add the following

GSSAPIAuthentication no
GSSAPIKeyExchange no
GSSAPIStoreDelegatedCredentials no

No comments: