Applies to:

All versions of Centrify Privilege Service and all versions of Solaris resources.


Problem:

Unable to access Solaris system via Account Login menu within CPS when running Solaris stock SSH. An error similar to the following is presented:

"Password authentication failed. The following authentication methods are available for this user: gssapi-keyex,gssapi-with-mic,publickey,password,keyboard-interactive."


Cause:

This issue is presented upon an unexpected Password Authentication prompt that stock SSH on Solaris provides and Centrify's PAM module does not interoperate with. For more technical details on this, please refer to KB-0983.


Workaround:

To fix this issue, please implement one of the following workarounds:

1) Install Centrify-enabled OpenSSH

OR

2) Disable SSH "password" authentication for stock Solaris sshd (e.g. Sun_SSH_1.1.4 on Solaris 10) by setting 'PasswordAuthentication no' in sshd_config.