ssh
klaas hagemann
klaas at northsailor.de
Thu Apr 11 04:55:51 EDT 2002
Hi,
i did it this way, and the result is:
when i try
# ssh <ipadress>
i get an segmentation fault
but when i do
#strace ssh <ipadress>
everything works fine.
Maybe i am to stupid to understand this, can someone explain this to me?
Thanks, Klaas
----- Original Message -----
From: Srinivas Cheruku
To: klaas hagemann
Cc: kerberos at mit.edu
Sent: Thursday, April 11, 2002 10:15 AM
Subject: RE: ssh
1. Apply the Kerberos patch and then the Openssh-gssapi patch.
2. Run the autoreconf after applying the patches. (autoreconf version should be later than 2.50)
#autoreconf
3. # ./configure --with-pam --with-kerberos5=<MIT Kerberos Installation path>
--sysconfdir=/etc/ssh
4. #make
5. #make install
No need of changing the /etc/ssh/sshd_config file. By default it makes use
of Kerberos Authentication.
6.Start the sshd daemon.
# /usr/local/sbin/sshd
#
7. Get a TGT from the MIT KDC.
$./kinit -f user at REALM.COM
Extract the service key of the host principal to keytab file.
8. Connect to the sshd server using ssh client
$ ssh -v hostname
Then, the ssh client contacts MIT KDC and gets a service ticket for host. It also forwards the TGT to the secure shell.
9. When you type klist in the shell, then you can see the forwarded TGT.
Good Luck,
Srini
-----Original Message-----
From: klaas hagemann [mailto:klaas at northsailor.de]
Sent: Thursday, April 11, 2002 1:36 PM
To: Srinivas Cheruku; kerberos at mit.edu
Subject: Re: ssh
SSH Kompiling seems to be ok, i compiled it without errors with
./configure --with-pam --with-kerberos5=/usr/local
Befort i applied the patches and ran autoconf.
I am not sure with these configuratioen files, is it possible für you to send me yours?
Thanks,
Klaas
----- Original Message -----
From: Srinivas Cheruku
To: kerberos at mit.edu
Sent: Thursday, April 11, 2002 5:46 AM
Subject: RE: ssh
Run the ssh client in verbose mode.
$ssh -v hostname
From that just try to make out when it is giving the error.
I dont know exactly why segmentation fault error is comming.
May be some configuration and compilation issue.
-----Original Message-----
From: klaas hagemann [mailto:klaas at northsailor.de]
Sent: Wednesday, April 10, 2002 7:48 PM
To: Srinivas Cheruku; kerberos at mit.edu
Subject: Re: ssh
ok, i got openssh and two patches, one for gssapi and one for kerberos.
i patched both succesfully and was able to make a new configure-file
i configured and compiled it successfully with krb5-support (--with-krb5)
and i can start the servrer successfully.
Then i try to use ssh and get
"segmentation fault" error.
Do you have an idea?
Klaas
----- Original Message -----
From: Srinivas Cheruku
To: kerberos at mit.edu
Sent: Wednesday, April 10, 2002 1:24 PM
Subject: RE: ssh
You can download openssh from http://www.openssh.com/
and the Simon's GSSAPI/Kerberos patch from http://www.sxw.org.uk/computing/patches/openssh.html
Srini
-----Original Message-----
From: klaas hagemann [mailto:klaas at northsailor.de]
Sent: Wednesday, April 10, 2002 4:44 PM
To: kerberos at mit.edu
Subject: ssh
Hi,
where can i get ssh server and client supporting kerberos auth for linux?
i apologize if this is a faq, but i haven't found anything.
thanks
klaas
********************************************************************* Disclaimer: The information in this e-mail and any attachments is confidential / privileged. It is intended solely for the addressee or addressees. If you are not the addressee indicated in this message, you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. Please advise immediately if you or your employer does not consent to Internet email for messages of this kind. *********************************************************************
********************************************************************* Disclaimer: The information in this e-mail and any attachments is confidential / privileged. It is intended solely for the addressee or addressees. If you are not the addressee indicated in this message, you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. Please advise immediately if you or your employer does not consent to Internet email for messages of this kind. *********************************************************************
********************************************************************* Disclaimer: The information in this e-mail and any attachments is confidential / privileged. It is intended solely for the addressee or addressees. If you are not the addressee indicated in this message, you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. Please advise immediately if you or your employer does not consent to Internet email for messages of this kind. *********************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/kerberos/attachments/20020411/951942bb/attachment.htm
More information about the Kerberos
mailing list