[Bug 1559801] [NEW] OpenSSH GSSAPI Authentication Broken In Ubuntu 16.04 Xenial

[Brian Knoll]

Public bug reported:

OpenSSH server GSSAPI authentication appears to be broken in Ubuntu
16.04 Xenial.  Ticket #1558576 details some other issues regarding
breakage in Ubuntu 16.04 pertaining to OpenSSH, but this ticket is
specifically for the fact that GSSAPI authentication is no longer
working, on the server side, in Xenial 16.04.  By "on the server side",
I mean that the client works fine and can connect using GSSAPI
authentication (key exchange or not) with  another machine, but if a
Xenial server is configured to allow GSSAPI authentication, it does not
function any more.  This functionality worked fine in Trusty 14.04.  In
16.04, if both the server and the client are configured to allow GSSAPI
authentication, the method always fails and OpenSSH continues to fall
through to the next authentication in the list.

I am willing to help debug this, so please let me know how I can help.

Thanks,
Brian

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: openssh-server 1:7.2p2-1
ProcVersionSignature: Ubuntu 4.4.0-14.30-generic 4.4.5
Uname: Linux 4.4.0-14-generic x86_64
ApportVersion: 2.20-0ubuntu3
Architecture: amd64
Date: Sun Mar 20 21:11:56 2016
InstallationDate: Installed on 2016-03-20 (0 days ago)
InstallationMedia: Ubuntu-Server 16.04 LTS "Xenial Xerus" - Alpha amd64 (20160318)
ProcEnviron:
 TERM=xterm
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: openssh
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug xenial

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1559801

Title:
  OpenSSH GSSAPI Authentication Broken In Ubuntu 16.04 Xenial

Status in openssh package in Ubuntu:
  New

Bug description:
  OpenSSH server GSSAPI authentication appears to be broken in Ubuntu
  16.04 Xenial.  Ticket #1558576 details some other issues regarding
  breakage in Ubuntu 16.04 pertaining to OpenSSH, but this ticket is
  specifically for the fact that GSSAPI authentication is no longer
  working, on the server side, in Xenial 16.04.  By "on the server
  side", I mean that the client works fine and can connect using GSSAPI
  authentication (key exchange or not) with  another machine, but if a
  Xenial server is configured to allow GSSAPI authentication, it does
  not function any more.  This functionality worked fine in Trusty
  14.04.  In 16.04, if both the server and the client are configured to
  allow GSSAPI authentication, the method always fails and OpenSSH
  continues to fall through to the next authentication in the list.

  I am willing to help debug this, so please let me know how I can help.

  Thanks,
  Brian

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: openssh-server 1:7.2p2-1
  ProcVersionSignature: Ubuntu 4.4.0-14.30-generic 4.4.5
  Uname: Linux 4.4.0-14-generic x86_64
  ApportVersion: 2.20-0ubuntu3
  Architecture: amd64
  Date: Sun Mar 20 21:11:56 2016
  InstallationDate: Installed on 2016-03-20 (0 days ago)
  InstallationMedia: Ubuntu-Server 16.04 LTS "Xenial Xerus" - Alpha amd64 (20160318)
  ProcEnviron:
   TERM=xterm
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: openssh
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1559801/+subscriptions