-
Titolo
configure native solaris 10 sshd for SSO -
Descrizione
You have installed and configured SUN SSHD version 1.1 or later on Solaris 10. When you attempt to log on using single sign on it fails. SSO out from the Solaris host to another non Solaris host works.
Running SSHD in debug show an error similar to
debug1: GSS-API error while accepting security context: Unspecified GSS failure. Minor code may provide more information
Zero length GSS context error token output -
Causa
The initial releases of Solaris do not have native support for the AES256 encryption type
-
Risoluzione
To test this issue you can remove the AES256 entries in your keytab using vastool ktutil -k /etc/opt/quest/vas/host.keytab remove -e aes256-cts-hmac-sha1-96.
Check you have the package SUNWcry installed, this adds support for AES 256
# pkginfo | grep SUNWcry