SEAM krb API

Will Fiveash william.fiveash at sun.com
Tue Apr 20 15:28:20 EDT 2004


On Tue, Apr 20, 2004 at 01:36:41PM -0500, Will Fiveash wrote:
> On Tue, Apr 20, 2004 at 01:58:31PM -0400, Wyllys Ingersoll wrote:
> > Ken Hornstein wrote:
> > 
> > >For example, I was trying to help someone once who was trying to get
> > >Simon Wilkinson's GSSAPI patch for SSH going with Solaris & SEAM, and
> > >he ran into the problem that Solaris didn't export the krb5 API.  He
> > >asked what I did, and I had to tell him that I didn't use SEAM, and
> > >that I advised him to do the same thing that I did (use the MIT
> > >library).
> > > 
> > >
> > Talk to Nico about how he added GSSAPI to SSH for Solaris... 
> > I think he looked into Simon's code and then went a different way
> > for various reasons.
> 
> Yes, there are no direct dependencies on the krb5 API in Nico's SSH/GSS
> implementation.  There are dependencies in sshd on libpam.so so I assume
> PAM is involved in the authorization.

Actually, ignore what I wrote about PAM doing the authz for sshd.  I was
wrong and I'm sure Nico will provide the correct details.

-- 
Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)


More information about the Kerberos mailing list