Some GSSAPI/Kerberos Questions

Phil Dibowitz phil at
Tue Feb 10 08:51:13 EST 2004

After reading some more from the archives, a private email, and some
general research, I see that KerbV support has been dropped in favor

Which is fine, and wonderful, I support GSSAPI.

But, erm, the announcement says, "This release contains some GSSAPI
user authentication support to replace legacy KerberosV authentication
support. At present this code is still considered experimental and

Confidence inspiring! =)

At USC, we are currently using (patched) 3.6.1p2 which has TGT passing
support in kerb1, which is kinda nice - but doesn't seem to work right
with kerberos password authentication via pam. 3.7.1p2 seems to
support the latter, but drops the former.

For those who have used the GSSAPI stuf in 3.7.1 - have you found it

When is this code supposed to be considered stable?
I don't seem to see a way to use/try this code at all. I don't see any
docs on it anywhere... am I being blind?

Phil Dibowitz                             phil at
Freeware and Technical Pages              Insanity Palace of Metallica         

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
 - Benjamin Franklin, 1759

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 

More information about the openssh-unix-dev mailing list