Kerberos and OpenSSH - Was:Kerberos password auth/expiry kbdint patch

Damien Miller djm at mindrot.org
Fri May 16 01:08:17 EST 2003


Booker Bense wrote:
>> The changes to the server to support kerberos-2 at ssh.com are about 30
>> lines of new code in two files.
> 
> - In my experience, that pretty much means they've got it wrong
> somewhere. Using the api correctly generally requires much more
> code than this. I will take a look today and try and provide
> useful comments.

It is only 30 lines of new code as it is near-identical to the protocol
1 KrbV auth method. i.e. we got to reuse our existing infrastructure.

-d





More information about the openssh-unix-dev mailing list