https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268186
--- Comment #20 from Cy Schubert <c...@freebsd.org> --- (In reply to amendlik from comment #19) Correct. This bypasses the GSSAPI code in sshd forcing it to rely on PAM entirely. I tested this here using my MIT KRB5 using pam_krb5 port (security/pam_krb5) built against security/krb5 (MIT KRB5 port). I don't need to do this in production because the Heimdal code in sshd works well with my MIT KRB5 KDC and its slaves. pam_krb5 in base also works well with MIT KRB5. Your problem is not reproduceable with MIT KRB5, suggesting that FreeIPA have customized or altered their MIT KRB5 in some way to be incompatible with Heimdal. -- You are receiving this mail because: You are the assignee for the bug.
