The attached patch adds support for Heimdal and MIT Kerberos in protocol v1 in the portable code. The Heimdal side of things just enables the code that's present in OpenBSD's 3.0 release, the MIT specific code adds compatibility for those areas in which the Heimdal API differs. This adds a new configuration option --with-kerberos5=<path>, which will detect which version of the binaries you are using. For this to work reliably, you'll need my patch to auth1.c posted a few minutes ago. Thanks to those of you who reviewed and commented upon the last version of this patch, I believe that the niggles should now have been ironed out, and I'd like to see this added to the portable code, if thats possible! Cheers, Simon. -- Simon Wilkinson <simon at sxw.org.uk> http://www.sxw.org.uk -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: opensshkrb5.diff Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20011113/70f8aa25/attachment.ksh