Kerberos and OpenSSH - Was:Kerberos password auth/expiry kbdint patch

[Damien Miller]

Booker Bense wrote:
>> The changes to the server to support kerberos-2 at ssh.com are about 30
>> lines of new code in two files.
> 
> - In my experience, that pretty much means they've got it wrong
> somewhere. Using the api correctly generally requires much more
> code than this. I will take a look today and try and provide
> useful comments.

It is only 30 lines of new code as it is near-identical to the protocol
1 KrbV auth method. i.e. we got to reuse our existing infrastructure.

-d