search for: msg_userauth_gssapi_m

Displaying 2 results from an estimated 2 matches for "msg_userauth_gssapi_m".

2017 Jan 17
2
Question on Kerberos (GSSAPI) auth
...s the ?complete? flag immediately after I create it and get the first outbound token out of it. It does not return the ?continue? result indicating that it wants a token back from the server. So, the only thing the code can do at that point is to send either MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETE or MSG_USERAUTH_GSSAPI_MIC, depending on whether the integrity flag ends up set in the completed context, and that doesn?t work with OpenSSH?s sshd. I?m only able to get it to work if I set the mutual_auth flag. In that case, I get the outbound token and a ?continue? result to wait for sshd?s token, which I do and then fee...
2017 Jan 16
2
Question on Kerberos (GSSAPI) auth
I?m working on an implementation of ?gssapi-with-mic? authentication for my AsyncSSH package and trying to get it to interoperate with OpenSSH. I?ve gotten it working, but there seems to be a discrepancy between the OpenSSH implementation and RFC 4462. Specifically, RFC 4462 says the following in section 3.4: Since the user authentication process by its nature authenticates only the client,