gssapi auth, and multihomed multinamed hosts

Edward Irvine eirvine at tpg.com.au
Wed Jun 6 05:36:38 EDT 2007


Hi Folks,

I have a Solaris 10 server with two ip addresses: "fixed.example.com"  
and "float.example.com". The latter is an IP address that the server  
sometimes assumes as part of its role in a high-availability cluster.

I have compiled my own openssh+gssapi version of sshd, and have got  
ssh single-sign-on working fine (both windows secureCRT, a patched  
version of Putty, and also the unix openssh clients) . So far so good.

It is now time to get gssapi auth to working with the  
"float.example.com" address.

Can I expect to just add the keytab for "float.example.com" into /etc/ 
krb5.keytab and expect everything to be OK?

Thanks
Eddie





More information about the Kerberos mailing list