Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm fighting with SSO and SSH on Debian Wheezy. Locally it works fine. I'm getting ticket successfully at login. But when I've logged in to the remote machine by SSH without password, klist on the remote machine finds no credentials. I tried to get more how-to, but I just know, that there must be enabled these options in /etc/ssh/ssh_config:

Host *
    GSSAPIAuthentication yes
    GSSAPIDelegateCredentials yes

Then each forwardable ticket should be sent. But it isn't. I tested by klist -f command, whether there is a F flag on the ticket. Yes, there is F shown. Despite I've to call kinit on the remote machine to get endowed with a key.

share|improve this question

I'm right, that these two options in /etc/ssh/ssh_config are enough. But on client machine, not on the server, where I've been working all the time.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.