Problem with kerberos and ssh.

Nicolas Williams Nicolas.Williams at sun.com
Wed Mar 1 18:39:11 EST 2006


On Thu, Mar 02, 2006 at 10:17:08AM +1100, Luke Howard wrote:
> 
> >As many others have pointed out, it looks like you are trying to
> >use a buggy version of a gssapi mechglue. There are versions that
> >do actually work, such as the UIUC
> >    http://grid.ncsa.uiuc.edu/gssapi-mechglue/
> >or the Solaris 10 version.
> 
> Or the Heimdal one:
> 
> 	http://www.padl.com/~lukeh/heimdal-mechglue-20050124.tar.gz
> 
> Based on the CITI mechglue, but with the bugs fixed. :-)
> 
> Also I think the BSD folk have written one from scratch, too.

Very cool.  Maybe we're getting to the point where we can informally (or
even formally) standardize parts of the SPI between the mechglue and the
mechanisms.  Given enough independent multi-mechanism GSS-API mechglue
and mechanism implementations it should be beneficial to standardize the
SPI.

Nico
-- 



More information about the Kerberos mailing list