30

Debugging a Nagios warning on ssh, I've discovered that gssapi-with-mic is causing long lags in authentication. I've turned it off, but what exactly am I missing? I gather that GSSAPI is a tool for authentication, but what about the -with-mic part?

25

Message Integrity Code:

The term message integrity code (MIC) is frequently substituted for the term MAC, especially in communications, where the acronym MAC traditionally stands for Media Access Control.

  • 2
    MAC doesn't stand for Media Access Control but for Message Authentication Code (see Wikipedia:hmac) – Ikke Jun 19 '12 at 7:09
  • 12
    @Ikke Actually it stands for both (which is why MIC has come into use, to disambiguate the two when talking about a MAC (message authentication code) associated with data transmitted across networks that use MACs (Media Access Control addresses)). – voretaq7 Aug 6 '12 at 22:00
  • 2
    @voretaq7 You're completely right. I misread the answer. – Ikke Aug 7 '12 at 7:52
  • 10
    Oh, I though it was a microphone and I wondered what the heck. – Vlasec Jan 14 '16 at 12:17
3

The fix is simple: disable attempts to use GSS-API by adding the following to ~/.ssh/config:

GSSAPIAuthentication no

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.