Question About Kerberos

Srinivas Cheruku csri at sonata-software.com
Fri Mar 22 01:25:54 EST 2002


Good you have keytab and krb5.conf ready.

what are you waiting for
1. start the sshd deamon
$/usr/local/sbin/sshd

2. Get a forwardable TGT
$kinit -f user

3. start the ssh client by giving
$ssh hostname



-----Original Message-----
From: Someone [mailto:please at nospam.net]
Sent: Thursday, March 21, 2002 9:17 PM
To: kerberos at mit.edu
Subject: Re: Question About Kerberos


Mark H. Wood wrote:

> Danny Lai <dannylai at pacific.net.sg> wrote:
> [snip]
> 
>>(b) I was trying to installed OpenSSH but I can't find any article
>>mention about configuring OpenSSH with Kerberos V. Where can I locate
>>any document?
>>
> 
> The GSSAPI code in OpenSSH (which is how you hook it to Kerberos V) is
> still an unofficial patch, as it has been for a long time.  I don't
> know why it never gets accepted into the official code.  See:
> 
> http://www.sxw.org.uk/computing/patches/openssh.html
> 
> 

I have compiled OpenSSH with that patch and now can someone tell me 
what's reuquired more ? I have got a keytab and also a krb5.conf file.

Regards

________________________________________________
Kerberos mailing list           Kerberos at mit.edu
http://mailman.mit.edu/mailman/listinfo/kerberos
*********************************************************************
Disclaimer: The information in this e-mail and any attachments is
confidential / privileged. It is intended solely for the addressee or
addressees. If you are not the addressee indicated in this message, you may
not copy or deliver this message to anyone. In such case, you should destroy
this message and kindly notify the sender by reply email. Please advise
immediately if you or your employer does not consent to Internet email for
messages of this kind.
*********************************************************************



More information about the Kerberos mailing list