Curious about final KRB5/GSSAPI patch inclusion.

[Austin Gonyou]

On Sat, 2002-05-18 at 06:24, Daniel Kouril wrote:
> On Thu, May 16, 2002 at 04:04:52PM -0500, Austin Gonyou wrote:
> > Darn it....most of the krb5 code is there already. :( Should it be
> > removed, or is the plan to wait till flux is at a minimum or no
> longer,
> > and go ahead anyway?
> 
> GSSAPI is not krb5 at all. Besides krb5 implementations of GSS-API,
> there is
> also a widely used implementation based on SSL and X.509
> authentication
...

Ahh...this makes sense now.

> I would really appreciate adding of the Simon's code. There are many
> users
> who are already using it at this time and who must mantain a
> separate openssh
> distribution.
> 
Simon, or anyone else, If you're listening, can you let us know if there
will be a new patch set for 3.2.2p1 for gssapi or mit-kerberos pieces
like before. 

As I stated in latest mail, krb5 auth works with passwords only as far
as I can tell right now. Ticket based auth does *not* seem to work. TIA.

> > 
> > On Wed, 2002-05-15 at 22:03, Damien Miller wrote:
> > > On 15 May 2002, Austin Gonyou wrote:
> > > 
> > > > What is the target version for all the KRB5 bits to be in
> place. I
> > > know
> > > > there is very much in place right now, but I remember someone
> > > mentioning
> > > > there was just a GSSAPI/MITKRB5 patch being waited for. 
> > > 
> > > The GSSAPI patch has not been included - it is based on a
> protocol
> > > spec
> > > which seems to be still in flux.
> > > 
> > > -d
> > -- 
> > Austin Gonyou
> > Systems Architect, CCNA
> > Coremetrics, Inc.
> > Phone: 512-698-7250
> > email: austin at coremetrics.com
> > 
> > "One ought never to turn one's back on a threatened danger and 
> > try to run away from it. If you do that, you will double the
> danger. 
> > But if you meet it promptly and without flinching, you will 
> > reduce the danger by half."
> > Sir Winston Churchill
-- 
Austin Gonyou
Systems Architect, CCNA
Coremetrics, Inc.
Phone: 512-698-7250
email: austin at coremetrics.com

"One ought never to turn one's back on a threatened danger and 
try to run away from it. If you do that, you will double the danger. 
But if you meet it promptly and without flinching, you will 
reduce the danger by half."
Sir Winston Churchill
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: This is a digitally signed message part
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20020518/10b542b4/attachment.bin