I would like to get some help to clear my thoughts for kerberos authentiction. I am confused with kerberos authentication flow.
I have three node in my system.
- (PS) Physical server (neither krb5-workstation nor krb5-lib are installed)
- (KC) KDC client (configured with this)
- (KS) KDC server (configured with this)
On KC , I have GSSAPIAuthentication enabled for sshd.
# GSSAPI options
GSSAPIAuthentication yes
However, I was expecting to login from PS to KC via ssh without any password prompt but instead , I get below error on PS.
debug1: Unspecified GSS failure. Minor code may provide more information
No Kerberos credentials available (default cache: KEYRING:persistent:1000)
My question is ,
Am I missing a configuration or kerberos authentication is not available for non-KDC client (PS)?