OpenSSH and GSSAPI patch

Douglas E. Engert deengert at anl.gov
Wed Sep 18 12:29:24 EDT 2002


Marc wrote:
> 
> Hello,
> 
> I was using successfully OpenSSH 3.1p1 with the GSSAPI/MIT patches from
> www.swx.org to authenticate to a w2k server. Now I want to install the
> latest version of OpenSSH which is 3.4p3 and so I patched it using again
> the GSSAPI patch and used the MIT kerberos v1.2.5 libraries but now I
> have a minor problem:


Sounds like in the previous version, you where sending your Kerberos password
to the sshd, and it was using this to login on the server. 

Look at the sshd_config file for these, and see if they are set the same.

PasswordAuthentication no
KerberosOrLocalPasswd yes


The 
> 
> To be able to ssh onto the SSHD server which is Kerberos enabled I need
> before to do a kinit else it's impossible to login. Before with OpenSSH
> 3.1p1 I could simply enter my passwords and it would work. What did
> change, how can I get this feauture back again so that in case i didn't
> do a kinit it will accept the password from prompt ?
> 
> Many thanks
> 
> Regards
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> http://mailman.mit.edu/mailman/listinfo/kerberos

-- 

 Douglas E. Engert  <DEEngert at anl.gov>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444



More information about the Kerberos mailing list