SSH configuration

[bodik]

hi,

I think, that you also need:

* krb5.conf
a proper configuration for your realm

*  sshd_config
KerberosAuthentication yes
KerberosOrLocalPasswd yes
KerberosTicketCleanup yes

* ssh_config

GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes

* pam.d/ssh
pam_krb5.so

* krb5.keytab
service key in keytab for host
 (to establish a trust between service and KDC)

>> any pointers in this regard?
there should be many howto's out there, but just now i cann't find any
suitable walkthrough. but this looks fine (i didn't read it :)

http://www.visolve.com/security/ssh_kerberos.php

bodik