Kerberos password authentication and SSH2

Kevin Sullivan ksulliva at psc.edu
Mon Jan 15 21:43:22 EST 2001


On 13-Jan-01 Markus Friedl wrote:
> ok, it's in the tree.

Cool, thanks.

If you want a "cleaner" solution you could move the k_setpag() code out of
both auth1.c and auth2.c, into sshd.c around line 1080, just before the
calls to do_authentication and do_authentication2.  That way the code
won't be duplicated.

        -Kevin

> On Thu, Jan 11, 2001 at 05:36:36PM -0500, Kevin Sullivan wrote:
>> -#ifdef KRB4
>> -        /* turn off kerberos, not supported by SSH2 */
>> -        options.kerberos_authentication = 0;
>> -#endif
>> +#ifdef AFS
>> +        /* If machine has AFS, set process authentication group. */
>> +        if (k_hasafs()) {
>> +                k_setpag();
>> +                k_unlog();
>> +        }
>> +#endif /* AFS */
>> +
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 284 bytes
Desc: not available
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20010115/da204650/attachment.bin 


More information about the openssh-unix-dev mailing list