Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-45669: SCP fails when transferring file larger that 1 GB using GSSAPI KEX with Centrify Enabled OpenSSH 8.2p1-5.7.0.207

Authentication Service ,  

11 December,20 at 11:06 PM

Problem:  

When using Centrify Enabled OpenSSH 8.2p1-5.7.0.207 and attempting to transfer a file over 1 GB via SCP it fails when GSSAPIKeyExchange is enabled.  

The following error is seen:
 
ssh_dispatch_run_fatal: Connection to <ipAddress> port 22: Failed to init GSSAPI context


Cause:

A change in the code for the stock version of OpenSSH-8.2p1 with the way GSSAPI sname was stored, caused an issue with Centrify Enabled OpenSSH when using GSSAPIKeyExchange for authentication.


Workaround:

Turn off GSSAPIKeyExchange on the client side in the /etc/centrifydc/ssh/ssh_config file by setting GSSAPIKeyExchange to no


Resolution:

This issue was resolved in a one-off for Centrify Infrastructure Services 2020 (CentrifyDC-openssh-8.2p1-5.7.0-220 and higher) and in the Centrify Infrastructure Services 2020.1 release.  If you need the one-off for the Centrify Infrastructure Services 2020 release, please contact Centrify Technical Support.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.