使用Kerberos验证SSH用户登录

zuoziqi98

网络中已经有了Kerberos服务器，而且GSSAPI也被SSH支持，所以我想用Kerberos来验证ssh。哪位高人能指导一下如何操作

zuoziqi98

debug情况如下
debug3: authmethod_is_enabled gssapi-with-mic
debug1: Next authentication method: gssapi-with-mic
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
debug2: we did not send a packet, disable method
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/zuoziqi/.ssh/id_rsa
debug3: no such identity: /home/zuoziqi/.ssh/id_rsa: No such file or directory
debug1: Trying private key: /home/zuoziqi/.ssh/id_dsa
debug3: no such identity: /home/zuoziqi/.ssh/id_dsa: No such file or directory
debug1: Trying private key: /home/zuoziqi/.ssh/id_ecdsa
debug3: no such identity: /home/zuoziqi/.ssh/id_ecdsa: No such file or directory
debug1: Trying private key: /home/zuoziqi/.ssh/id_ed25519
debug3: no such identity: /home/zuoziqi/.ssh/id_ed25519: No such file or directory
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
root@192.168.2.8's password: