OpenSSH authentication fails with GSSAPIAuthentication set to no globally and yes in a Match block

Solution Verified - Updated -

Issue

In /etc/ssh/sshd_config the GSSAPIAuthentication is set globally to no:

GSSAPIAuthentication no

A Match block is present for which allows GSSAPIAuthentication:

Match User <username>
        GSSAPIAuthentication yes
        PubkeyAuthentication yes
        HostbasedAuthentication no
        PasswordAuthentication no
        RSAAuthentication no

However, the authentication always fails for the matching user.

Environment

  • Red Hat Enterprise Linux 7
  • openssh with UsePrivilegeSeparation sandbox (the default), and GSSAPIAuthentication no set globally in /etc/ssh/sshd_config

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content