similar to: Openssh 3.4p1 and Krb5

Just curious. There seems to be an awful lot in the source, but no actual configure option. Please advise. -- Austin Gonyou Systems Architect, CCNA Coremetrics, Inc. Phone: 512-698-7250 email: austin at coremetrics.com "It is the part of a good shepherd to shear his flock, not to skin it." Latin Proverb

Thanks, Simon for the MIT Kerberos5 patches. FWIW, here are further patches which allow openssh-3.0p1 to work with paleo-MIT Kerberos5 1.0.6, more or less (more with tickets and less with the auth_krb5_password {get,verify}_init_creds stuff). BTW, the patches I pulled out of the archive seemed to have some line wrapping problems; I had to apply several chunks by hand. I'm therefore including

Steve Frampton [mailto:frampton@j-com.co.jp] of your address change Content-Length: 7142 samba@samba.org David Barroso <h4371719@alumnes.eup.udl.es> Jeremy Allison <jeremy@valinux.com> "Tulipant Gergely" <tulipant-gergely@dbrt.hu> Edwards Philip M Contr AFRL/SNRR <Philip.Edwards@wpafb.af.mil> Drenning Bruce <bdrenni@catholicrelief.org> Glenn

My organization has a need to use protocol 2 + kerberos Real Soon Now, so I've gone ahead and applied Simon's KRB5 patch to openssh-3.1p1. I don't know how far along Simon is; for all I know he might have the definitive patch out tomorrow. So FWIW, here's what I have now. gunzip <openssh-3.1p1.krb5.patch.gz | patch -p0 autoconf ./configure --prefix=/usr/local/ossh

Hi, I am trying to impliment OpenSSH v2.9p1 with the Krb5/GSSAPI patches at: http://www.sxw.org.uk/computing/patches/openssh-2.9p1-gssapi.patch On a FreeBSD 4.3-STABLE system (with both the integrated Heimdal libs and the MIT Krb5 package from ports intstalled). I patched the src tree, reconfigured, recompiled, installed, and it works - except for Krb5 passwords or Krb5 tickets. And I really

Hi I'd also like to express interest in Simon's kerb 5 patches being integrated into the openssh distribution. Are there currently any plans for this to happen and if so, what's the expected time frame? Ben. Simon Wilkinson <sxw at dcs.ed.ac.uk> wrote: > My patches for SSH version 1 Kerberos 5 support (heavily based upon > work done by Dan Kouril) are now available from

An updated version of my GSSAPI patches is now available for use with OpenSSH 3.4p1. This version also includes support for running with privsep enabled. The patches are available from http://www.sxw.org.uk/computing/patches/openssh.html These patches provide support for Kerberos and GSI authentication and credential passing with version 2 of the SSH protocol. They implement the protocol

http://bugzilla.mindrot.org/show_bug.cgi?id=573 Summary: Don't include krb4 headers on a krb5 compile Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: Kerberos support AssignedTo: openssh-bugs at mindrot.org

The attached patch adds support for Heimdal and MIT Kerberos in protocol v1 in the portable code. The Heimdal side of things just enables the code that's present in OpenBSD's 3.0 release, the MIT specific code adds compatibility for those areas in which the Heimdal API differs. This adds a new configuration option --with-kerberos5=<path>, which will detect which version of the

I'm using a OpenSSH 3.0.2p1 with the krb5 patch from <http://www.sxw.org.uk/computing/patches/openssh.html>. I'm getting KRB5CCNAME set to "" even though <http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=98269278629018&w=2> mentions fixing it. This causes things like kinit to fail with a somewhat uninformative error message. The relevant sshd_config lines

Hi All. Right now, if OpenSSH is configure'ed --with-kerberos5 and the system has a krb5-config that's not in /usr/local/bin then configure won't find it. The attached patch changes this so krb5-config will be used if it's anywhere in the path (although if it exists in the directory specified by --with-kerberos5= then the user-supplied path will take precedence). You will

Hi. I've had this patch a while (and I posted an earlier version a while back): it tries to use krb5-config to obtain the Kerberos build options. If it's not available, or isn't in the path specified to --with-kerberos5 then the existing behaviour is kept. It seems to work for me with MIT and Heimdal. I got some feedback from one person, would any of the Kerberos-using folk care to

Dear Sir and Madam: I'm writing to you on behalf of the MIT Kerberos team and several other parties interested in the availability of Kerberos authentication for the SSH protocol. We recently noticed that the OpenSSH developers had added support for the kerberos-2 at ssh.com user authentication mechanism. We are delighted but we believe additional steps are necessary, as explained

Hi, I think kerberosIV authentication is broken in openssh-3.4p1 in ssh2 version protocol: nmrindy$ klist Ticket file: /tmp/tkt111_429097 Principal: mmokrejs at NATUR.CUNI.CZ Issued Expires Principal Aug 19 12:40:49 Aug 19 22:40:49 krbtgt.NATUR.CUNI.CZ at NATUR.CUNI.CZ Aug 19 12:40:49 Aug 19 12:45:49 rcmd.nmrindy at NATUR.CUNI.CZ Aug 19 12:40:49 Aug 19

I've been installing OpenSSH 2.9p2 onto several RedHat Linux machines, after compiling in the GSSAPI/Kerberos5 patch from here: http://www.sxw.org.uk/computing/patches/openssh.html I've been using ssh both to let users in via passwords and Kerberos tickets, and both have been working fine... except for one irritating machine, which (for no good reason I can see) fails when using kerberos

hi there first of all, please excuse my poor english... I know I can associate a file extension in wine with a linux application like i did for .sxw in this .reg-file: REGEDIT4 [HKEY_CLASSES_ROOT\.sxw] @="sxw.document" [HKEY_CLASSES_ROOT\sxw.document] @="sxw.document" [HKEY_CLASSES_ROOT\sxw.document\shell] [HKEY_CLASSES_ROOT\sxw.document\shell\open]

Will Simon Wilkinson's GSSAPI Key Exchange patch ever be incorporated into the OpenSSH source? http://www.sxw.org.uk/computing/patches/openssh.html I'm sure I'm not the only one that uses it and would like to see it become part of the OpenSSH source. Is there something missing or is there some technical/philosophical reason for not including it?

I will be updating the MIT krb5 port to krb5-1.3.2 this weekend. Unfortunately crypto-publish.org does not distribute the new source yet. Traditionally I disabled support for fetch from crytpo-publish.org until they updated their website with the latest krb5 sources, requiring the port to fetch the source from MIT in all cases. This time will be different, that is unless of course someone

Greetings, I have run into a rather bizarre problem that is beyond my meager skills to debug so I am turning to the collective wisdom of this list. Here are the facts: 2 SGI machines (alpha running IRIX 6.5.15 & beta running 6.5.14) running openssh-3.4p1. ssh was built on each machine using the same configuration and were working fine. I upgraded the OS on alpha to 6.5.17 and ran into

I have three machine mounting a samba share on a debian server running 3.0.11 (just updated as 3.0.10 has some serious problems). There's an XP box, and two Ubuntu (debian) PCs, one with Warty (kernel 2.4.21) and Hoary (kernel 2.6.4 / 5). Both Ubunutu machines have the following entry in fstab: \\Server\Documents /home/phill/Documents smbfs user,uid=nobody,gid=phill,guest 0 0 and both