Unsupported option "GSSAPIAuthentication"

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View

On Solaris 8 and 10, when I set the configuration option
GSSAPIAuthentication to yes (either in ssh_config or in command line),
I see unsupported option error. Could somebody point out where the
problem could be?

Here are SSH versions on these machines:

dev3:~ amptest$
dev3:~ devuser$ klist
Ticket cache: /tmp/krb5cc_107
Default principal: devuser@ROKDC.COM

Valid starting                       Expires
Service principal
Mon Dec 17 12:50:57 2007  Mon Dec 17 22:50:57 2007  krbtgt/
dev3:~ amptest$
dev3:~ devuser$ echo $KRB5CCNAME
dev3:~ amptest$
dev3:~ devuser$ ssh -v -o "GSSAPIAuthentication=yes" dev7.mydomain.com
OpenSSH_3.9p1, OpenSSL 0.9.7e 25 Oct 2004
command-line line 0: Unsupported option "GSSAPIAuthentication"
debug1: Host 'dev7.mydomain.com' is known and matches the RSA host
debug1: Found key in /export/home/devuser/.ssh/known_hosts:23
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,gssapi-with-
debug1: Next authentication method: publickey
debug1: Trying private key: /export/home/amptest/.ssh/identity
debug1: Trying private key: /export/home/amptest/.ssh/id_rsa
debug1: Trying private key: /export/home/amptest/.ssh/id_dsa
debug1: Next authentication method: password
devuser@dev7.mydomain.com's password:

Re: Unsupported option "GSSAPIAuthentication"

Quoted text here. Click to load it
Quoted text here. Click to load it

Your SSH client was built without Kerberos and GSSAPI support.  You
need to rebuld it with "./configure --with-kerberos5" (assuming you
have all of the required bits on your system).

Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Site Timeline