freebsd security - Nov 2003 - Kerberized applications in FreeBSD 5.x

In FreeBSD 5.x only telnet/telnetd works 'out of box' with kerberos.
Why ftp/ftpd, ssh/sshd and cvs do not support kerberos ?

Thanks!

On Fri, Nov 28, 2003 at 02:56:27PM +0300, äÅÊÔÅÒ áÌÅËÓÁÎÄÒ ÷ÁÌÅÒÉÅ×ÉÞ
wrote:
> In FreeBSD 5.x only telnet/telnetd works 'out of box' with
kerberos.
> Why ftp/ftpd, ssh/sshd and cvs do not support kerberos ?
Actually, `cvs' does support Kerberos via GSSAPI in FreeBSD 5.2.

Expect OpenSSH to support Kerberos via GSSAPI in FreeBSD 5.3.

FTP is tricky--- I'm not touching it until we decide which FTP is the
*real* FTP.

Cheers,
-- 
Jacques Vidrine   NTT/Verio SME      FreeBSD UNIX       Heimdal
nectar@celabo.org jvidrine@verio.net nectar@freebsd.org nectar@kth.se

=?koi8-r?B?5MXK1MXSIOHMxcvTwc7E0iD3wczF0snF18ne?=
writes:
> In FreeBSD 5.x only telnet/telnetd works 'out of box' with
kerberos.
> Why ftp/ftpd, ssh/sshd and cvs do not support kerberos ?
You need to turn it obn by hand in /etc/pam.d/*. Its not on by default,
because that would cause nasty delays in PAM.

M
--
Mark Murray
iumop ap!sdn w,I idlaH