Kerberized SSH on Solaris 8
Derek Yarnell
derek at cs.umd.edu
Fri May 17 15:15:57 EDT 2002
Marc wrote:
> Hello,
>
> What method would you recommend to enable Kerberos 5 in SSH on a Solaris
> 8 ? Simply use pam_krb5 within PAM ?
>
> Regards
>
No, openssh's pam implementation is sorta brokens or Solaris 8 pam is
broken, prob. depends on how you look at it.
First you should patch with the gssapi/krb5 patches from ,
http://www.sxw.org.uk/computing/patches/openssh.html
I would just use for openssh the built in krb5 authentication that comes
with openssh. One note if you want to get a forwardable ticket, openssh
does not do it. I have a patch if you are interested in it but I have to
separate it out from another patch to run aklog() (for afs tokens)
More information about the Kerberos
mailing list