That is not entirely true. Yes, the stock distribution does not have
Kerberos 5 support. However, Simon Wilkinson wrote a patch, which uses
GSSAPI, to OpenSSH and this can be linked against the Kerberos 5 GSSAPI
libraries. A sysadmin I work with is currently using this setup at
the ISP he runs. I think this should be added to the stock distribution
(not sure why it hasn't yet).
Here is where the patch is located:
http://www.sxw.org.uk/computing/patches/openssh.html
On Thu, Apr 05, 2001 at 03:38:17PM -0400, Carl J. Nobile wrote:
> Hi Austin,
>
> OpenSSH does not work with Kerberos 5, only Kerberos 4 so go no further in
> your setups, you will need SSH from SSH Communication Security.
>
> Carl
>
> On 05-Apr-01 Austin Gonyou wrote:
> > I would like to ask if someone would exchange emails with me for a
> > couple
> > of days, if even that, to help me verify my kerberos setup is correct
> > for
> > use with openssh. I think it is setup, but it doesn't work so obviously
> > I've missed something. I basically want to find out if, for openssh,
> > pam
> > is even needed when using kerberos, and then also to verify that I've
> > got
> > kerberos setup properly. Thanks for any of your time.
> >
> > --
> > Austin Gonyou
> > Systems Architect
> > Coremetrics, Inc.
> > Phone: 512-796-9023
> > email: [EMAIL PROTECTED]
>
> ------------------------------------------------------------------------
> E-Mail: Carl J. Nobile <[EMAIL PROTECTED]>
> Date: 05-Apr-01 Phone: 315-453-2912 Ex. 5336
> Time: 15:35:50 Fax: 315-479-0859
>
> Software Engineering Group -- AppliedTheory Corp.
> 224 Harrison Street, 6th Floor, Syracuse, NY 13202
> ------------------------------------------------------------------------
--
James J. Barlow <[EMAIL PROTECTED]>
Senior System Engineer
National Center for Supercomputing Applications Voice : (217)244-6403
605 East Springfield Avenue Champaign, IL 61820 Cell : (217)840-0601
http://www.ncsa.uiuc.edu/People/jbarlow Fax : (217)244-1987
