similar to: Kerb5 Support?

Hi, I am trying to decide if it is worth the time to test the Kerberos support in a port I am working on of Openssh 3.5p1. Does using Kerb5 with SSH1 solve the security problems inherent in protocol 1 and bring it up to par with the security level of SSH2 or are there other issues that Kerb5 authentication won't help for SSH1? Thanks, Greg Lambert --------------------------------- Do

Krb5-authentication and Kerb5-TGT-passing is working well with openssh-2.3.0p1. Question: Is there a solution using rdist -P "/usr/local/bin/ssh" without the need for RhostRSAAuthentication, RSAAuthentication or using the Kerberos r-command set? The objective is to do away with ".rhosts/.shost" and private-key authentication when Kerberos authentication is already in

The openssh-3.0 announcement said: (...) 3) improved Kerberos support in protocol v1 (KerbIV and KerbV) (...) This seems to imply at least some krb5 support, but there is nothing new in ./configure --help about it. Grepping the source, I see many references to #ifdef KRB5. Trying to enable it manually (a #define in config.h) gives errors about a missing krb5_auth_con_setaddrs_from_fd, which I

Hello Theo, > > > Could you let me know where this test patch would be available. > > > > Try: > > http://www.omniti.com/~jesus/SecurID/ > > > > -- Regarding your patch, did you continue the integration (mainly: Handle PIN creation and changing ...)? Do you foreseen to transport it in new release 2.3.0p1? Kind regards, Joel

When comparing SSH 1.2.27 with OpenSSH 2.5.1 I see that the SecurID code/patch is not in OpenSSH 2.5.1. I'm not sure how or why that happened. Upon looking through the OpenSSH 2.5.1 source, I think I could fairly easily provide a 'SecurID Authentication Method' patch (which would rely on -DHAVE_SECURID, -I/blah/securid/include, and -L/blah/securid/lib... /blah/securid being a

Gang, I've been trying to build rc29 under Solaris 10 using either "--with-gssapi" or Kerberos 5 ticket usage. I'm trying to figure out how to set up fetchmail on another S10 box to do IMAP fetches from dovecot without having to enter a password. No matter what configure option I try, I get Building with GSSAPI support ........ : no at the end of the configure. I searched

First, thanks for the great work done on Centos 4.1. Recently installed on two systems that previously were running Windows 98 and Windows ME. (The user of the Windows ME system has no problems so far.) I was very surprised when Centos 4.1 recognized and automatically configured the BJC-2100 printer connected to the USB port during install. The only problem encountered so far is poor

Hello everyone, I did alot of searching before I came to post here, but have failed to come up with a reason why this isn't working. I may just be missing a major step. First, let me get the formailities out of the way. Redhat ES 3.0 Linux 2.4.21-4.ELsmp #1 SMP Fri Oct 3 17:31:21 EDT 2003 i686 athlon i386 GNU/Linux samba-3.0.10-1 I configured and installed swat so I could do remote

please test Olaf Kirch's patch. it looks fine to me, but i don't to K5. i'd like to see this in the next release. thx -m -------------- next part -------------- --- openssh-3.4p1/auth-krb5.c.krb Sun Jun 9 21:41:48 2002 +++ openssh-3.4p1/auth-krb5.c Tue Jul 23 15:15:43 2002 @@ -73,18 +73,17 @@ * from the ticket */ int -auth_krb5(Authctxt *authctxt, krb5_data *auth, char

I've been reading some documentation and can't find an answer to my question... I work in an environment where we have a bunch of Solaris 2.8 servers and a bunch of developers using Windows 2000 and XP desktops. We support a client using a Windows 2000 Server ADS PDC, and they need to map some of the NFS drives on our Solaris 2.8 servers. Currently we run a PCNetLink PDC (don't worry

Hello all, I looked long and hard for SecurID support for OpenSSH and I have not found it. So, I spent a few hours today and added SecurID authentication support into OpenSSH. Specifically the 2.2.0p1 portability release. I have beat on it for several hours and it seems to work just fine. I don't know if anyone would find these patches useful or not... I also don't know if the

I read the thread on securid back in march. openssh doesn't support it because it's propriatary, right? I understand that, however I've still got a problem. Work use securid *exclusively* using ssh2. It uses an authentication protocol of securid-1 at ssh.com. The client side does *not* need the securid propriatary stuff, no need for the include files or the library. So, given

I am printing from linux to a printer attached to a win98 computer. I send a text file directly to the printer such as 'lpr -P BJC <file.txt>', the printer prints all the text as it should then fails to eject the last page and then goes off line. When I push the online button, it ejects the page and then is ready again. I am using a Cannon BJC4304. This printer supposedly can

Hello: I have this situation: I can make calls internally, I can make inbound calls but I can't make outbound calls. Thanks in advance. These are my devices: * asterisk 11.8.1 = 192.168.1.22 * sipphone grandstream gxp2160 = 192.168.1.5 * gateway audiocodes mp-114 2fxs-2fxo = 192.168.1.4 port 1 (FXS) connected to an analog phone port 3 (FXO) connected to the PSTN These are my

Sorry, I guess I should have been more specific, I am printing from linux to a printer attached to a win98 computer. When I say text I mean when I send a text file directly to the printer such as 'lpr -P BJC <file.txt>'. When I say 'hang' what I mean is that the printer prints all the text as it should then fails to eject the last page and then goes off line. When I push

I've seen variations on this problem in the past but they haven't seemed to help much in this instance. I have Samba running on a NetBSD(sparc) and would like to set it up to print to a Canon BJC-2100 running on a networked Windows ME machine. (My sparc box lacks a 'standard' parallel interface and I lack an adapter). I can print just fine to the printer from a second Windows

> Hello > I complied openssh like this "./configure --with-pam" and I did configure > /etc/pam.conf as follows > # PAM configuration > # > # Authentication management > # > sshd auth required /lib/security/pam_securid.so reserve > sftp auth required /lib/security/pam_securid.so reserve > # > login auth required

I've been through the archive, and not found anything conclusive, except for a problem report of sorts from Theo E. Schlossnag (who has a set of patches for SecurID integration). I'm about to replace some ssh 1.2.26 (I know!) installations with OpenSSH 2.5.1p2, on Solaris 2.6 sparc boxes, and we use SecurID tokens for these boxes. I've compiled up OpenSSH 2.5.1p2 with --with-pam,

I was reading this SecurID patch to openssh-3.1p1, List: openssh-unix-dev Subject: =?iso-8859-2?Q?SecurID=20support=20for=20OpenSSH?= From: =?iso-8859-2?Q?V=E1clav=20Tomec?= <v_t_m at seznam.cz> Date: 2002-03-25 14:53:34 and think I've found a copy bugs, the patch for which is included below. First there's a an #ifdef'd if-statement which applies to

Dear SAMBA Group, I've playing around with getting SAMBA to do things for me. I have an Ultra-1 running Solaris 2.6 and a Win-XP system with a Canon BJC-2000 printer attached to it. I'm trying to get the SUN to print to the printer on the XP box. I have followed various instructions but now when I print as "root" with "lp -d bjc <file>" I get an email message