[19338] in Kerberos
Re: NewBie Problem with SSH Single Sign on
daemon@ATHENA.MIT.EDU (Jens Kleineheismann)
Fri May 30 05:10:27 2003
From: Jens Kleineheismann <jk@em.uni-karlsruhe.de>
Date: 30 May 2003 08:54:29 GMT
Message-ID: <bb7685$k8o$1@news.rz.uni-karlsruhe.de>
To: kerberos@MIT.EDU
Errors-To: kerberos-bounces@mit.edu
Hi Florian,
fjauernig@gmx.de wrote:
> [want SSH single sign on]
> Does anyone has a glue where to start? Its good possible, that I would like
> to have something which isn't possible the way I like to implement this.
First of all: it is possible to get something you want.
But: Openssh supports ticket forwarding only with protocol version 1.
And that is not what you want.
To get it working with protocol version 2 you can use GSSAPI Authentication.
Therefor you have to patch your openssh code.
Simon Wilkinson has written a propper patch for several OpenSSH Versions
(but 3.6.x is recommended).
Look at http://www.sxw.org.uk/computing/patches/openssh.html
hope this helps (and is still up to date),
Jens
--
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS d- s-:-- a- C++(---) UL++++$ P@ L+++ E--- W(--) N++ o? K? w--- O
M- !V PS+++ PE Y+ PGP+ t 5- X- R* tv-- b++ DI-- D---- G e h++ !r !y
------END GEEK CODE BLOCK------
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
