I'm trying to solve a problem with integrating OpenSSH into a Kerberos environment. There are workarounds that can be used for Solaris and Linux because they have PAM, but it is a major problem under Irix which lacks that capability. I understand that the directions work efforts take are strongly dependent upon finding volunteers, but why is the Kerberos code so obsolete or, at the very least, stagnant? Kerberos 5 has been out for several years and Kerberos 4 has actually been cracked. Many system admins were forced to rebuild their existing krb5 distributions to remove krb4 compatibility. Even though RedHat Linux has all the backward compatibility headers, libs, etc, I'm still unable to build properly and the rpms that are generally available do not support Kerberos anyway. Not that this would solve the Irix problem anyway, but at least knowing that the backward compatibility code was the difference would at least give some options.
 
Scott

Reply via email to