Kerberos auth based on ticket

Simon Wilkinson simon at sxw.org.uk
Tue Dec 16 09:20:35 EST 2008


On 16 Dec 2008, at 13:37, Rowley, Mathew wrote:

> If you have a kerberos ticket, and ssh to a box that has GSSAPI  
> enabled, will that pass through/disregard the PAM stack?

With OpenSSH, it will use the setcred bit of the auth stack, and the  
account and session stacks, but disregard the authentication portion  
of the auth stack.

S.




More information about the Kerberos mailing list