JSCH kerberos 连接配置

近日产品要支持kerberos，
测试过程中经常会出现，需要输入kerberos用户名的情况，debug跟踪，发现为jsch在远程连接的时候会进行认证

2017-09-13 10:04:22.391 DEBUG 13148 --- [nio-8080-exec-4] c.b.m.rest.base.util.JSchConnection      : connect,172.16.31.165,hadoop,hadoop,22
2017-09-13 10:04:22.493 DEBUG 13148 --- [nio-8080-exec-1] c.b.m.rest.base.util.JSchConnection      : connect,172.16.31.165,hadoop,hadoop,22
Kerberos 用户名 [hadoop]: Kerberos 用户名 [hadoop]: Kerberos 用户名 [hadoop]: Kerberos 用户名 [hadoop]: Kerberos 用户名 [hadoop]: 

Kerberos 用户名 [hadoop]: hadoop的 Kerberos 口令: 

com.jcraft.jsch.JSchException: Auth fail
    at com.jcraft.jsch.Session.connect(Session.java:512)
    at com.jcraft.jsch.Session.connect(Session.java:183)
    at com.bonc.manager.rest.base.util.JSchConnection.connect(JSchConnection.java:67)
    at com.bonc.manager.rest.base.util.JSchConnectionFactory.getJschConnection(JSchConnectionFactory.java:50)
    at com.bonc.manager.rest.base.util.JSchConnectionFactory.getJschConnection(JSchConnectionFactory.java:65)
    at com.bonc.manager.rest.base.util.ConfigUtil.readXmlFromHost(ConfigUtil.java:104)
    at com.bonc.manager.rest.modules.config.dao.impl.ConfigDaoImpl.getHostConfig(ConfigDaoImpl.java:68)
    at com.bonc.manager.rest.modules.config.service.ConfigServer.readconfig(ConfigServer.java:865)
    at com.bonc.manager.rest.modules.config.service.ConfigServer.saveConfigToLocal(ConfigServer.java:704)
    at com.bonc.manager.rest.util.ConfigurationUtil.getHdfsConf(ConfigurationUtil.java:56)
    at com.bonc.manager.rest.util.ConfigurationUtil.update(ConfigurationUtil.java:180)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.springframework.scheduling.support.ScheduledMethodRunnable.run(ScheduledMethodRunnable.java:65)
    at org.springframework.scheduling.support.DelegatingErrorHandlingRunnable.run(DelegatingErrorHandlingRunnable.java:54)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308)
    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180)
    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at java.lang.Thread.run(Thread.java:745)

问题解决方式就是将kerberos认证方式去掉，具体为去掉Kerberos/GSSAPI (gssapi-with-mic)

session.setConfig(
    "PreferredAuthentications", 
    "publickey,keyboard-interactive,password");

参考
https://stackoverflow.com/questions/29669459/skipping-kerberos-authentication-prompts-with-jsch