Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to implement Single Sign On using kerberos with ssh. I changed the below files and restarted the ssh daemon.


GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes


GSSAPIAuthentication yes

When I am trying to ssh from an ubuntu machine to centos. I got the below exception

Unspecified GSS failure.  Minor code may provide more information
Cannot contact any KDC for requested realm

But I am able to login without using password from centos machine to ubuntu. Kinit is working fine in both machines.

What is the problem here?

share|improve this question
Please add the log of the KDC during a login attempt and the relevant portion of /var/log/secure' with LogLevel DEBUG` on the server side. – dawud May 27 '13 at 20:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.