Kerberized SSH on Solaris 8

[Marc]

Derek Yarnell wrote:

> Marc wrote:
> 
>> Hello,
>>
>> What method would you recommend to enable Kerberos 5 in SSH on a 
>> Solaris 8 ? Simply use pam_krb5 within PAM ?
>>
>> Regards
>>
> 
> No, openssh's pam implementation is sorta brokens or Solaris 8 pam is 
> broken, prob. depends on how you look at it.
> 
> First you should patch with the gssapi/krb5 patches from ,
> 
> http://www.sxw.org.uk/computing/patches/openssh.html
> 
> I would just use for openssh the built in krb5 authentication that comes 
> with openssh. One note if you want to get a forwardable ticket, openssh
> does not do it. I have a patch if you are interested in it but I have to 
> separate it out from another patch to run aklog() (for afs tokens)
> 
> 
> 

Yes sure I would be interested, forwarding tickets are really usefull !!

Regards