Answers to Common Problems

This sections introduces workaround instructions for some problem situations.

Troubleshooting GSSAPI Authentication

When connecting from a Windows 5.x or 6.x client to a Windows 4.x server using GSSAPI authentication, if authentication fails although GSSAPI has been correctly configured, you may have to disable the LMHOSTS lookup on the client-side computer. Follow these instructions:

Select Control Panel → Network Connections.
In Local Area Connection, right-click and select Properties.
In the Local Area Connection Properties dialog box, General tab, select Internet Protocol (TCP/IP) and click the Properties button.
In the Internet Protocol (TCP/IP) Properties dialog box, in the General tab, click the Advanced... button.
In the Advanced TCP/IP Settings dialog box, in the WINS tab, clear the Enable LMHOSTS lookup check box.
Restart the client-side computer.

Password Window Loses Focus

In some cases on Windows XP clients, the window for the password or the public-key passphrase can lose focus. This means that the password window is shown active on the screen, but when you start typing your password, the asterisks do not appear in the box. If the actual focus happens to be in an other window, your password or passphase may appear there.

The password window loses focus most often when you have the SSH Tectia Connection Broker status window open. So the first workaround is to make sure the status window is not open while you start logging in.

A permanent solution to the problem is to modify the Windows settings that control the behaviour of the applications. By default, Windows has on a setting that prevents applications from stealing the focus. As a workaround, you can allow applications to steal the focus. Note that the setting affects all Windows applications, not just the SSH Tectia Connection Broker.

To be able to change the setting, you need to download the Microsoft Tweak UI utility program. Follow these instructions:

Download the Microsoft Tweak UI utility from: http://www.microsoft.com/windowsxp/downloads/powertoys/xppowertoys.ms px
Install the Tweak UI on your computer with the help of the installation wizard included.
Start the program from the Start menu.
Go to the General - Focus view and clear the Prevent applications from stealing focus check box as shown in the following figure.
Figure 8.1. Microsoft Tweak UI utility
Click Apply or OK.

FTP-SFTP Conversion Fails

When attempting to use the FTP-SFTP conversion, SSH Tectia ConnectSecure may produce the following kind of error message:

FALLBACK TO PLAIN FTP: Key exchange failed. New hostkey or hostkey 
changed! Please save the key for host: "<hostname or IP-address>"

This indicates that the remote server's host key has not been saved on the client, or it has been saved under a different name. The hostname can occur in 3 different formats: FQDN, short hostname, or IP-address. The host key is always saved under the hostname used in the login.

The FTP-SFTP conversion requires that you have the host key saved under the same hostname as defined in the connection profile, because the FTP-SFTP uses the profiles when connecting to remote hosts.

To avoid unnecessary host-key-changed situations, use the profile name when connecting to a remote host. For example, use the following command syntax to log in from command line:

sshg3 <profilename>