KerberosIV support

Jan Iven jan.iven at cern.ch
Fri May 16 18:54:40 EST 2003


>>>>> "Damien" == Damien Miller <djm at mindrot.org> writes:

 Damien> Hi All, The OpenBSD tree is likely to be dropping KerberosIV
 Damien> support very soon.  We will ultimately follow suit, but if
 Damien> there are many Krb4 users we may give a transition period of
 Damien> a release or two.

 Damien> AFAIK we don't compile at all against MIT KrbIV because of
 Damien> library conflicts.

 Damien> So, who is using OpenSSH Krb4 support at the moment?

We (CERN) do heavily use Krb4 auth & credential forwarding, coupled
with AFS token passing. Will be some time before we can get rid of it,
as it requires a complete (all platforms) transition to
OpenAFS+Kerberos5 (no server-side compatibility Krb5<->4 translator,
which would be fairly easy).

I guess most sites with AFS are in a similar situation.

Regards
Jan




More information about the openssh-unix-dev mailing list