solaris 9 ssh不能用

苦木

SUN 890 SOLARIS 9
# ps -ef | grep ssh   
    root  4064  3981  0 09:20:57 pts/13   0:00 grep ssh
    root 16297     1  0   4月 13 ?        0:00 /usr/lib/ssh/sshd
# ssh 10.5.10.32----报如下错误:
unable to initialize mechanism library [/usr/lib/gss/gl/mech_krb5.so]
xmalloc: zero size

已经把/etc/ssh/sshd_config中的
#PermitRootLogin no注释了


请问是什么原因?谢谢!

苦木

没人回,自己顶!期待中!

fp3016

要将/etc/ssh/sshd_config文件中的permitRootLogin值改为yes.
然后重启SSH服务:#svcadm restart network/ssh

personalsea

原帖由 fp3016 于 2007-4-16 13:45 发表
要将/etc/ssh/sshd_config文件中的permitRootLogin值改为yes.
然后重启SSH服务:#svcadm restart network/ssh

老兄，看清楚了，是Solaris 9的系统

svcadm restart network/ssh是Solaris 10下的命令吧？

sevenchina

To work around the sshd(1M) daemon failing to start and the ssh(1) client failing with the error message "libxfn", the SUNWfns "Federated Naming Service (XFN) - core libraries and utilities" package can be installed from the Solaris 9 media.

To work around the issue of ssh(1) failing with the error message "xmalloc", the ssh_config(4) option 'StrictHostKeyChecking' can be set to 'no'. Please see the the ssh_config(4) man page for details of the impact of making this change.

To work around the issue of ssh(1) failing with the error message "mech_krb5.so", either modify the krb5.conf(4) file (/etc/krb5/krb5.conf) to remove the following entries (as "root"):

    slave_kdcs
    domain_mapping
or GSS-API support can be disabled by adding the following entries to sshd_config(4) (/etc/ssh/sshd_config):

    GSSAPIAuthentication no
    GSSAPIKeyExchange no
    GSSAPIStoreDelegatedCredentials no
in addition to adding the following entries to ssh_config(4) (/etc/ssh/ssh_config):

    GSSAPIAuthentication no
    GSSAPIKeyExchange no
and then restarting the SSH service by running the following command (as "root"):

    # /etc/init.d/sshd restart

Resolution

This issue is addressed in the following release:

SPARC Platform

Solaris 9 with patch 114356-08 or later (BugID 6402708)
Solaris 9 with patch 112908-29 or later (BugID 5020096)
Solaris 9 with patch 113273-13 or later and 114356-09 or later (BugID 6410762)

sevenchina

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102451-1

sevenchina

http://blog.chinaunix.net/u1/46451/showart.php?id=1839774