Kerberized SSH on Solaris 8

[Derek Yarnell]

Marc wrote:
> Hello,
> 
> What method would you recommend to enable Kerberos 5 in SSH on a Solaris 
> 8 ? Simply use pam_krb5 within PAM ?
> 
> Regards
> 

No, openssh's pam implementation is sorta brokens or Solaris 8 pam is 
broken, prob. depends on how you look at it.

First you should patch with the gssapi/krb5 patches from ,

http://www.sxw.org.uk/computing/patches/openssh.html

I would just use for openssh the built in krb5 authentication that comes 
with openssh. One note if you want to get a forwardable ticket, openssh
does not do it. I have a patch if you are interested in it but I have to 
separate it out from another patch to run aklog() (for afs tokens)