OpenSSH and GSSAPI patch

Douglas E. Engert deengert at
Wed Sep 18 12:29:24 EDT 2002

Marc wrote:
> Hello,
> I was using successfully OpenSSH 3.1p1 with the GSSAPI/MIT patches from
> to authenticate to a w2k server. Now I want to install the
> latest version of OpenSSH which is 3.4p3 and so I patched it using again
> the GSSAPI patch and used the MIT kerberos v1.2.5 libraries but now I
> have a minor problem:

Sounds like in the previous version, you where sending your Kerberos password
to the sshd, and it was using this to login on the server. 

Look at the sshd_config file for these, and see if they are set the same.

PasswordAuthentication no
KerberosOrLocalPasswd yes

> To be able to ssh onto the SSHD server which is Kerberos enabled I need
> before to do a kinit else it's impossible to login. Before with OpenSSH
> 3.1p1 I could simply enter my passwords and it would work. What did
> change, how can I get this feauture back again so that in case i didn't
> do a kinit it will accept the password from prompt ?
> Many thanks
> Regards
> ________________________________________________
> Kerberos mailing list           Kerberos at


 Douglas E. Engert  <DEEngert at>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444

More information about the Kerberos mailing list