SSHD: Kerberos based SSO login with gssapi-with-mic option fails.

Solution Verified - Updated -


  • Kerberos based SSO login with gssapi-with-mic option fails with below error.
$ ssh -o PreferredAuthentications=gssapi-with-mic -Kvvv `hostname -f`
debug1: Authentications that can continue: gssapi-keyex,gssapi-with-mic,password
debug3: start over, passed a different list gssapi-keyex,gssapi-with-mic,password
debug3: preferred gssapi-with-mic
debug3: authmethod_lookup gssapi-with-mic
debug3: remaining preferred:
debug1: No more authentication methods to try.
Permission denied (gssapi-keyex,gssapi-with-mic,password).


  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • SSSD
  • Kerberos
  • Openssh

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content