KerberosIV support
Jan Iven
jan.iven at cern.ch
Fri May 16 18:54:40 EST 2003
>>>>> "Damien" == Damien Miller <djm at mindrot.org> writes:
Damien> Hi All, The OpenBSD tree is likely to be dropping KerberosIV
Damien> support very soon. We will ultimately follow suit, but if
Damien> there are many Krb4 users we may give a transition period of
Damien> a release or two.
Damien> AFAIK we don't compile at all against MIT KrbIV because of
Damien> library conflicts.
Damien> So, who is using OpenSSH Krb4 support at the moment?
We (CERN) do heavily use Krb4 auth & credential forwarding, coupled
with AFS token passing. Will be some time before we can get rid of it,
as it requires a complete (all platforms) transition to
OpenAFS+Kerberos5 (no server-side compatibility Krb5<->4 translator,
which would be fairly easy).
I guess most sites with AFS are in a similar situation.
Regards
Jan
More information about the openssh-unix-dev
mailing list