返回
-
标题
gssapi ssh sso no principal in keytab matched desired name -
说明
When trying to ssh sso you are put at the password prompt and see the message:no principal in keytab matched desired name
-
原因
Using the -n option to change the host name when joining the system to the domain. -
解决办法
If joininig with -n not using the host name, then alias the host name ( short and long ) into the keytab if using gssapi.
You may also need to add it to the system in AD's servicePrincipalName as well. ( As long as its not conflicting. If it is conflicting, then when gssapi'ing need to use the joined name otherwise the wrong service ticket might be issued. )