search for: kerb4

With the help of Jan Iven I have been able to compile openssh-2.9.9p2 on Solaris 2.6 with AFS/kerb4 support using gcc. ./configure --sysconfdir=/etc/ssh --with-tcp-wrappers \ --with-egd-pool=/var/run/egd-pool \ --with-kerberos4=/usr/athena --with-afs=/usr/afsws to do this I modified the resulting Makefile, from: CPPFLAGS=-I. -I$(srcdir) -I/usr/local/ssl/include -I/usr/l...

...d we do not have administrative access to the domain. Some of my coworkers have admin access limited to specific OUs. I am wondering whether this message may be related to the fact that we are running with NTLMCompatibility Mode 3. I used AFS and DCE/DFS for years, so I know my way around Kerb4 and 5. Not being a Windows AD guru, I'm not sure if the NTLMCompat setting applies to Kerberos (I thought this basically shutoff the older, non-Kerberized authentication methods). I also saw some blurbs in the list archive about having to reset user passwords at least once on Win2003 AD ser...

.... OpenSSH uses PAM on Linux and Solaris, and AIX "authenticate" on AIX. These external systems do not verify the KDC; if you submit a correct Kerberos/AFS password, it will grant you tickets. You do not need an rcmd key. However, our SGI Irix systems actually use the built-in auth-kerb4 authentication. Since we do not have rcmd keys, password authentication fails. I am sure that verifying the KDC is a good thing to do... But in our case, it causes difficulties. Verifying the KDC is not consistently enforced, anyway. So the attached patch provides a way to turn it off. I h...

...o.com We recently upgraded from openssh-3.6.1p2 to openssh-3.7.1p2 and are now not able to login. We rely on PAM authentication and our PAM configuration looks like this: sshd auth required /usr/lib/security/$ISA/pam_krb54.so.1 get_k4_tgt This pam module is home-grown and gets both Kerb5 and Kerb4 tickets. I've tried running sshd -d -d -d to figure out the problem here and I'm not sure what the issue is. I'll attach the debug output shortly. Here is my /etc/ssh/sshd_config: HostKey /etc/ssh/ssh_host_key HostKey /etc/ssh/ssh_host_dsa_key LoginGraceTime 600 IgnoreRhosts no Igno...