Hi Jim,
Does this work with the OpenSSH protocol 2 or just the protocol 1.5?
SSH Communication Security now support Kerberos 5 in both protocols.
Carl
On 05-Apr-01 Jim Barlow wrote:
> That is not entirely true. Yes, the stock distribution does not have
> Kerberos 5 support. However, Simon Wilkinson wrote a patch, which uses
> GSSAPI, to OpenSSH and this can be linked against the Kerberos 5 GSSAPI
> libraries. A sysadmin I work with is currently using this setup at
> the ISP he runs. I think this should be added to the stock
> distribution
> (not sure why it hasn't yet).
>
> Here is where the patch is located:
>
> http://www.sxw.org.uk/computing/patches/openssh.html
>
>
> On Thu, Apr 05, 2001 at 03:38:17PM -0400, Carl J. Nobile wrote:
>> Hi Austin,
>>
>> OpenSSH does not work with Kerberos 5, only Kerberos 4 so go no
>> further in
>> your setups, you will need SSH from SSH Communication Security.
>>
>> Carl
>>
>> On 05-Apr-01 Austin Gonyou wrote:
>> > I would like to ask if someone would exchange emails with me for a
>> > couple
>> > of days, if even that, to help me verify my kerberos setup is
>> > correct
>> > for
>> > use with openssh. I think it is setup, but it doesn't work so
>> > obviously
>> > I've missed something. I basically want to find out if, for openssh,
>> > pam
>> > is even needed when using kerberos, and then also to verify that
>> > I've
>> > got
>> > kerberos setup properly. Thanks for any of your time.
>> >
>> > --
>> > Austin Gonyou
>> > Systems Architect
>> > Coremetrics, Inc.
>> > Phone: 512-796-9023
>> > email: [EMAIL PROTECTED]
>>
>> -----------------------------------------------------------------------
>> -
>> E-Mail: Carl J. Nobile <[EMAIL PROTECTED]>
>> Date: 05-Apr-01 Phone: 315-453-2912 Ex.
>> 5336
>> Time: 15:35:50 Fax: 315-479-0859
>>
>> Software Engineering Group -- AppliedTheory Corp.
>> 224 Harrison Street, 6th Floor, Syracuse, NY 13202
>> -----------------------------------------------------------------------
>> -
>
> --
> James J. Barlow <[EMAIL PROTECTED]>
> Senior System Engineer
> National Center for Supercomputing Applications Voice :
> (217)244-6403
> 605 East Springfield Avenue Champaign, IL 61820 Cell :
> (217)840-0601
> http://www.ncsa.uiuc.edu/People/jbarlow Fax :
> (217)244-1987
------------------------------------------------------------------------
E-Mail: Carl J. Nobile <[EMAIL PROTECTED]>
Date: 05-Apr-01 Phone: 315-453-2912 Ex. 5336
Time: 16:41:47 Fax: 315-479-0859
Software Engineering Group -- AppliedTheory Corp.
224 Harrison Street, 6th Floor, Syracuse, NY 13202
------------------------------------------------------------------------
