Jon Peatfield wrote:
On Fri, 22 Aug 2008, Wayne Betts wrote:
<snip>
Hi Wayne,
This is not an oops, it is on purpose.
From the README in that directory
"These versions of openssh have been patched to be able to use
both the old and the new versions of gssapi. This allows them
to do kerberos authentication with both kerberized openssh before
openssh 3.9, and after openssh 3.9"
But we do not have the openssh server configured so that it does
kerberos
only, like we do in SLF's version of openssh-server.
Why?
Well, if we did, you'd be worrying alot more than just having it do
aklog
when you log in. You wouldn't be able to log in any other way than
kerberos. And I don't think you want that.
So we have it configured to have the same settings that you get
with the
regular openssh-server that you get from RedHat.
Thanks for the response Troy, but I'll have to put on the SL dunce
hat and sit in a corner for a while, because I've searched in vain
for the README or directory you're referring to.
Look for example in:
ftp://ftp.scientificlinux.org/linux/scientific/46/i386/contrib/RPMS/openssh/
I note that the text of the README is different in:
ftp://ftp.scientificlinux.org/linux/scientific/46/x86_64/contrib/RPMS/openssh/
but that may be intentional.
If you don't want the extra kerb stuff you may not want these contrib
packages.
-- Jon
Thank you, Jon. The mirror site at my facility doesn't have the README
files, and a quick sampling of other mirrors show some have them and
some don't. <I'm now removing the dunce hat from my head, but still
clutching it tightly.>
-Wayne
