SSH2 GSSAPI/KerberosV.

Booker Bense bbense at SLAC.Stanford.EDU
Tue Jul 29 11:32:04 EST 2003


On Mon, 28 Jul 2003, Damien Miller wrote:

> Lewis Thompson wrote:
> > Hi,
> >
> >   I've just set up OpenSSH to authenticate through Kerberos tickets.  I
> > spent a whole while figuring out I couldn't use SSH2 before stumbling
> > across the information somewhere.  First of all:  is it possible this
> > could be made very noticable in the sshd_config file?
> >
> >   Secondly, is there any chance that SSH2 /will/ become supported in the
> > future?  There are already patches at
> > http://www.sxw.org.uk/computing/patches/openssh.html and as I
> > understand, this is where the SSH1 patches were held before they were
> > ``officialised''.  Sorry if this is the wrong list, but I figured you
> > were the people in the know!
>
> This has been discussed a couple of times on this list, so check the
> archives for details. The patches are being worked on, but progress is
> slow because of the lack of assistance (despite all the talk from people
> asking for the patches to be merged).
>

- What needs to be done? Last I read you were only going to
implement GSSAPI auth and not credential forwarding. This will
produce something that anybody using GSSAPI will find largely
useless, but given that or nothing I will hold my nose and
do whatever I can to help.

- Booker C. Bense




More information about the openssh-unix-dev mailing list