System Preparation

Installing the Kerberos GSSAPI client and server utility

RedHat, CentOS or Scientific Linux

On RedHat, CentOS or Scientific Linux, install the Kerberos GSSAPI utilities by running the following command:

Debian or Ubuntu

On Debian or Ubuntu, install the Kerberos GSSAPI utilities by running the following command:

Troubleshooting

To troubleshoot a GSSAPI connection, you require two separate terminals.

Window Terminal 1 - As root

1. In the first windowterminal, as root, run the following command:

2. You should now have the following output with no prompt:

Window Terminal 2 - As your test user

1. In the second windowterminal, as your test user, run the following command:

   powershell

2. In a non-X environment (and no display forwarding), the identity is selected from the .gss_eap_id file in the test user's home directory. Create this file with the following content:

3. In X, you should now be prompted to select an identity in the . Choose one that will authenticate locally.

GSS Output

After selecting your identity, you should now see output in both windows.

Successful output

1. In Window 1, the output should scroll rapidly with a lot of hex text before ending with something similar to the following:

2. In Window 2, the output looks similar to the below:

Failed output

If the GSSAPI connection failed, you may see one or more errors in either window.

1. In Window 1, you should see one or more messages similar to the below:

2. In Window 2, you should see one or more error messages similar to the below:

Now you will need to diagnose why the error occurred.