search for: kerbv

Is something special required for KerbV auth to work? I've enabled: KerberosAuthentication yes on some test boxes and it doesn't work. I do a kinit, and then ssh and it asks for a password. If yo...

The openssh-3.0 announcement said: (...) 3) improved Kerberos support in protocol v1 (KerbIV and KerbV) (...) This seems to imply at least some krb5 support, but there is nothing new in ./configure --help about it. Grepping the source, I see many references to #ifdef KRB5. Trying to enable it manually (a #define in config.h) gives errors about a missing krb5_auth_con_setaddrs_from_fd, which I reall...

I noticed that it appears KerbV tgt passing seems to have disappeared in the 3.7 release. Was this dropped, or is it planned to come back? Was there a reason it disappeared? I looked through the archives but couldn't find much. Thanks, -- Phil Dibowitz phil at ipom.com Freeware and Technical P...

...st works but ssh joe at host doesn't work. Same with scp's. I've tried recompiling ssh (even though the so-name of kerb libs didn't change), but it didn't work, and still no go... I'm using openssh 3.9p1 on Solaris 9 (and 8 and 2.6, but mostly 9) SPARC, and as I said MIT KerbV 1.4.1/1.3.1. Anyone have any ideas? -- Phil Dibowitz Systems Architect and Administrator Enterprise Infrastructure / ISD / USC UCC 180 - 213-821-5427 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes...

After reading some more from the archives, a private email, and some general research, I see that KerbV support has been dropped in favor of GSSAPI. Which is fine, and wonderful, I support GSSAPI. But, erm, the announcement says, "This release contains some GSSAPI user authentication support to replace legacy KerberosV authentication support. At present this code is still considered experiment...

...ow stored in $HOME. New Features: ============= 1) Smartcard support in the ssh client and agent based on work by University of Michigan CITI (http://www.citi.umich.edu/projects/smartcard/). 2) support for Rekeying in protocol version 2 3) improved Kerberos support in protocol v1 (KerbIV and KerbV) 4) backward compatibility with older commercial SSH versions >= 2.0.10 5) getopt(3) is now used by all programs 6) dynamic forwarding (use ssh(1) as your socks server) 7) ClearAllForwardings in ssh(1) 8) ssh(1) now checks the hostkey for localhost (NoHostAuthenticationForLocalhost yes/no)....