Re: Six Kerberos/OS X/SSH observations and questions

2005-02-27 Thread Russ Allbery
In comp.protocols.kerberos, Yeechang Lee [EMAIL PROTECTED] writes: 3) I've had public key SSH logins working well between all three boxes for some time. Given that fact, I wonder if I should even bother to switch to Kerberized SSH logins in the first place on any of my boxes. Put another way,

Six Kerberos/OS X/SSH observations and questions

2005-02-27 Thread Yeechang Lee
I've installed MIT Kerberos 5 to provide single signon among the three boxes in my home network. Given that I'm a casual user I'm rather proud of my little setup, complete with regularly-updated slave KDC as backup. It's quite neat using Kerberos tickets to authenticate console logins, sudos, and

Re: Six Kerberos/OS X/SSH observations and questions

2005-02-27 Thread Gnarlodious
Entity Yeechang Lee spoke thus: 3) I've had public key SSH logins working well between all three boxes for some time. Given that fact, I wonder if I should even bother to switch to Kerberized SSH logins in the first place on any of my boxes. Put another way, is there any reason to believe

Re: Six Kerberos/OS X/SSH observations and questions

2005-02-27 Thread Sam Hartman
Yeechang == Yeechang Lee [EMAIL PROTECTED] writes: Yeechang It took me quite a while to figure out why Kerberos SSH Yeechang connections *didn't* work to and from the iBook; for Yeechang others' benefit, it's due to the change in OpenSSH 3.8 Yeechang from gssapi to