DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 q=dns; s=default; b=HHmJsCSFQyEcnKWsT/NiEWh3ME7Q7w/hly9GTjb8Deo
	4WzpzU/XoZPzvL984sQWj1dNjpb5iwB4RJJ3KKh2VrkOfcv2yySHViUkfea5H03g
	wkvphmzZ/DoC+cIRuGfLuY5qL6PGvwf5jxgQD+rjKqbfpCvdi9L6JPoVY5wjWsa0
	=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Message-ID: <51C33835.6000207@openafs.org>
Date: Thu, 20 Jun 2013 13:13:25 -0400
From: Jeffrey Altman <jaltman@openafs.org>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130509 Thunderbird/17.0.6
MIME-Version: 1.0
To: cygwin@cygwin.com
Subject: Re: Heimdal 1.5.2: "unknown mech-code 2529639054 for mech 1 3 6 1 4 1 311 2 2 10"
References: <409A0E510096B044A0EE3778BB3F1F5C01379C903ECD@EXMAIL.hrl.com>
In-Reply-To: <409A0E510096B044A0EE3778BB3F1F5C01379C903ECD@EXMAIL.hrl.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

On 6/14/2013 5:39 PM, Nogin, Aleksey wrote:
> debug1: SSH2_MSG_SERVICE_REQUEST sent
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> debug1: Authentications that can continue: publickey,gssapi-with-mic,password
> debug1: Next authentication method: gssapi-with-mic
> debug1:  Miscellaneous failure (see text)
> unknown mech-code 2529639054 for mech 1 3 6 1 4 1 311 2 2 10
> 
> debug1: Delegating credentials
> debug1: Delegating credentials
> debug1: Enabling compression at level 6.
> debug1: Authentication succeeded (gssapi-with-mic).
> Authenticated to XXXhostXXX ([IP.IP.IP.IP]:22).

I'm not sure what the issue is here.  The authentication succeeded.

MechType 1.3.6.1.4.1.311.2.2.10 is Microsoft's NTLM SSP.  The sshd does
not support NTLM and so rejects it.  The next GSS mechanism is
negotiated within the gssapi-with-mic exchange.  That is probably
Kerberos5 and it succeeds.

Jeffrey Altman


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple