Using Kerberos5 in 3.3p1

Simon Wilkinson sxw at dcs.ed.ac.uk
Wed Jun 26 22:29:54 EST 2002


On Wed, 26 Jun 2002, Daniel Kouril wrote:

> I'm not able to get Kerberos5 authenticarion work together with PrivSep.
> According to strace, it seems that the kerberos authentication stage is
> performed by the user process in chrooted enviroment. The problem is that
> Kerberos authentication must be done by root. Is anybody working on a fix?
> (or am I missing something in configuration?)

No - I think that's correct. I'm working on getting my GSSAPI patches
going with PrivSep - I think I'm nearly there. I haven't looked in depth
at the protocol 1 krb5 stuff.

Cheers,

Simon.




More information about the openssh-unix-dev mailing list