X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 q=dns; s=default; b=HHmJsCSFQyEcnKWsT/NiEWh3ME7Q7w/hly9GTjb8Deo
	4WzpzU/XoZPzvL984sQWj1dNjpb5iwB4RJJ3KKh2VrkOfcv2yySHViUkfea5H03g
	wkvphmzZ/DoC+cIRuGfLuY5qL6PGvwf5jxgQD+rjKqbfpCvdi9L6JPoVY5wjWsa0
	=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 s=default; bh=wta+ditfOB5b6flkCWHN6dROhbg=; b=t+8JAHeLCTWR8QbSS
	rvIDyGc9D48xR1MiRtfZCtlz/ck2uQMtUTMuQ6D/0U5oaXTGhYoXq5LuiEAYEadk
	D+VwcHS8WEJxsnC/akXnFNw0unGiUPZSWDrC+g/fdSxE3IxSv4N6DXPDw/ZKHJvs
	7H99BC77QJWIgkfb4myBi2B1ko=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Spam-SWARE-Status: No, score=-1.6 required=5.0 tests=AWL,BAYES_40,KHOP_THREADED autolearn=ham version=3.3.1
X-MDAV-Result: clean
X-MDAV-Processed: mail.secure-endpoints.com, Thu, 20 Jun 2013 13:13:31 -0400
X-Spam-Processed: mail.secure-endpoints.com, Thu, 20 Jun 2013 13:13:31 -0400	(not processed: message from trusted or authenticated source)
X-Return-Path: jaltman AT openafs DOT org
X-Envelope-From: jaltman AT openafs DOT org
X-MDaemon-Deliver-To: cygwin AT cygwin DOT com
Message-ID: <51C33835.6000207@openafs.org>
Date: Thu, 20 Jun 2013 13:13:25 -0400
From: Jeffrey Altman <jaltman AT openafs DOT org>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130509 Thunderbird/17.0.6
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Heimdal 1.5.2: "unknown mech-code 2529639054 for mech 1 3 6 1 4 1 311 2 2 10"
References: <409A0E510096B044A0EE3778BB3F1F5C01379C903ECD AT EXMAIL DOT hrl DOT com>
In-Reply-To: <409A0E510096B044A0EE3778BB3F1F5C01379C903ECD@EXMAIL.hrl.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

On 6/14/2013 5:39 PM, Nogin, Aleksey wrote:
> debug1: SSH2_MSG_SERVICE_REQUEST sent
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> debug1: Authentications that can continue: publickey,gssapi-with-mic,password
> debug1: Next authentication method: gssapi-with-mic
> debug1:  Miscellaneous failure (see text)
> unknown mech-code 2529639054 for mech 1 3 6 1 4 1 311 2 2 10
> 
> debug1: Delegating credentials
> debug1: Delegating credentials
> debug1: Enabling compression at level 6.
> debug1: Authentication succeeded (gssapi-with-mic).
> Authenticated to XXXhostXXX ([IP.IP.IP.IP]:22).

I'm not sure what the issue is here.  The authentication succeeded.

MechType 1.3.6.1.4.1.311.2.2.10 is Microsoft's NTLM SSP.  The sshd does
not support NTLM and so rejects it.  The next GSS mechanism is
negotiated within the gssapi-with-mic exchange.  That is probably
Kerberos5 and it succeeds.

Jeffrey Altman



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple