Marc wrote: > Hello, > > What method would you recommend to enable Kerberos 5 in SSH on a Solaris > 8 ? Simply use pam_krb5 within PAM ? > > Regards >
No, openssh's pam implementation is sorta brokens or Solaris 8 pam is broken, prob. depends on how you look at it. First you should patch with the gssapi/krb5 patches from , http://www.sxw.org.uk/computing/patches/openssh.html I would just use for openssh the built in krb5 authentication that comes with openssh. One note if you want to get a forwardable ticket, openssh does not do it. I have a patch if you are interested in it but I have to separate it out from another patch to run aklog() (for afs tokens) ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos
