Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-45669: SCP fails when transferring file larger that 1 GB using GSSAPI KEX with Centrify Enabled OpenSSH 8.2p1-5.7.0.207

Authentication Service ,  

11 December,20 at 11:06 PM

Problem:  

When using Centrify Enabled OpenSSH 8.2p1-5.7.0.207 and attempting to transfer a file over 1 GB via SCP it fails when GSSAPIKeyExchange is enabled.  

The following error is seen:
 
ssh_dispatch_run_fatal: Connection to <ipAddress> port 22: Failed to init GSSAPI context


Cause:

A change in the code for the stock version of OpenSSH-8.2p1 with the way GSSAPI sname was stored, caused an issue with Centrify Enabled OpenSSH when using GSSAPIKeyExchange for authentication.


Workaround:

Turn off GSSAPIKeyExchange on the client side in the /etc/centrifydc/ssh/ssh_config file by setting GSSAPIKeyExchange to no


Resolution:

This issue was resolved in a one-off for Centrify Infrastructure Services 2020 (CentrifyDC-openssh-8.2p1-5.7.0-220 and higher) and in the Centrify Infrastructure Services 2020.1 release.  If you need the one-off for the Centrify Infrastructure Services 2020 release, please contact Centrify Technical Support.

Related Articles

 articleKB-6041: How to show current license type in use by adclient articleKB-6040: How to change the license type in use after adclient successful joined to the AD? articleKB-6073: How to join the Linux/Unix Centrify Server to Active Directory with specific Computer Role? articleKB-20210: Common Questions Regarding Centrify DirectControl and CoreOS articleKB-6056: How to report the group policy settings that are in effect for the local computer? articleKB-6038: How to specify the license type to use when joining the server to AD using adjoin? articleKB-6044: How to configure users for automatic Kerberos Credentials for infinite renewal even after users have logged out? articleKB-10570: SCP rekey fails for Kerberos connection with file size is large than 1GB articleKB-6050: How to configure a group for automatic Kerberos Credentials for infinite renewal?