[Bug 2495] New: add GSI GSSAPI SSO authentication to OpenSSH

[bugzilla-daemon at bugzilla.mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2495

            Bug ID: 2495
           Summary: add GSI GSSAPI SSO authentication to OpenSSH
           Product: Portable OpenSSH
           Version: 7.1p1
          Hardware: amd64
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Kerberos support
          Assignee: unassigned-bugs at mindrot.org
          Reporter: thomas.downes at ligo.org

This is effectively a bump of bug 958, filed by Jim Basney, to the
current version of openssh. Jim maintains a patch for openssh which
enables authentication with GSI GSSAPI.

Effectively it enables single-sign-on with certificate verification by
the client of the host and of the client by the host. This is in use
securely by a large number of users in scientific and other computing
projects.

Patch:

http://grid.ncsa.illinois.edu/ssh/installpatch.html
http://grid.ncsa.illinois.edu/ssh/dl/patch/

Full releases:

https://github.com/globus/gsi-openssh/releases

We would like you to review this patch and consider it for inclusion in
the standard release of openssh. Currently, we are compelled to
recompile and repackage openssh ourselves on both linux and OS X.
Practically speaking, it can be hard to keep the packaging going
although I believe (hope) the burden on Jim of maintaining the patch
itself is fairly low.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.