This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: Heimdal 1.5.2: "unknown mech-code 2529639054 for mech 1 3 6 1 4 1 311 2 2 10"
- From: Jeffrey Altman <jaltman at openafs dot org>
- To: cygwin at cygwin dot com
- Date: Thu, 20 Jun 2013 13:13:25 -0400
- Subject: Re: Heimdal 1.5.2: "unknown mech-code 2529639054 for mech 1 3 6 1 4 1 311 2 2 10"
- References: <409A0E510096B044A0EE3778BB3F1F5C01379C903ECD at EXMAIL dot hrl dot com>
On 6/14/2013 5:39 PM, Nogin, Aleksey wrote:
> debug1: SSH2_MSG_SERVICE_REQUEST sent
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> debug1: Authentications that can continue: publickey,gssapi-with-mic,password
> debug1: Next authentication method: gssapi-with-mic
> debug1: Miscellaneous failure (see text)
> unknown mech-code 2529639054 for mech 1 3 6 1 4 1 311 2 2 10
>
> debug1: Delegating credentials
> debug1: Delegating credentials
> debug1: Enabling compression at level 6.
> debug1: Authentication succeeded (gssapi-with-mic).
> Authenticated to XXXhostXXX ([IP.IP.IP.IP]:22).
I'm not sure what the issue is here. The authentication succeeded.
MechType 1.3.6.1.4.1.311.2.2.10 is Microsoft's NTLM SSP. The sshd does
not support NTLM and so rejects it. The next GSS mechanism is
negotiated within the gssapi-with-mic exchange. That is probably
Kerberos5 and it succeeds.
Jeffrey Altman
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple