gssftp 连接不上

[beesman]

redhat enterprise 5 gssftp 连接不上
google搜过了,答案都试过都不行.

[seh@localhost xinetd.d]$ cat gssftp
# default: off
# description: The kerberized FTP server accepts FTP connections \
# that can be authenticated with Kerberos 5.
service ftp
{
flags = REUSE
socket_type = stream
wait = no
user = root
server = /usr/kerberos/sbin/ftpd
server_args = -l
log_on_failure += USERID
disable = no
}

seh@localhost xinetd.d]$ cat krb5-telnet
# default: off
# description: The kerberized telnet server accepts normal telnet sessions, \
# but can also use Kerberos 5 authentication.
service telnet
{
flags = REUSE
socket_type = stream
wait = no
user = root
server = /usr/kerberos/sbin/telnetd
log_on_failure += USERID
disable = no
}
service telnet
{
flags = REUSE
socket_type = stream
wait = no
user = root
server = /usr/sbin/in.telnetd
log_on_failure += USERID
disable = no
}

[seh@localhost xinetd.d]$ netstat -a |grep ftp
tcp 0 0 *:ftp *:* LISTEN
[seh@localhost xinetd.d]$

[root@localhost xinetd.d]# netstat -tlnup |grep 21
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 4265/xinetd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2144/sendmail: acce
tcp 0 0 :::22 :::* LISTEN 2111/sshd

[root@localhost xinetd.d]# ftp 192.168.0.4
Connected to 192.168.0.4.
220 localhost.localdomain FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI error major: An invalid name was supplied
GSSAPI error minor: Cannot determine realm for numeric host address
GSSAPI error: initializing context
GSSAPI authentication failed
334 Using authentication type KERBEROS_V4; ADAT must follow
KERBEROS_V4 accepted as authentication type
Kerberos V4 krb_mk_req failed: You have no tickets cached

Name (192.168.0.4:seh): root
331 Password required for root.
Password:
530 Login incorrect.
Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>

[lk_cool]

http://yachi.idv.tw/blog/archives/2005/11/30/158/