[19488] in Kerberos
Re: Password-less authentication with OpenSSH 3.6.1 and krb5/GSSAPI
daemon@ATHENA.MIT.EDU (Parag Godkar)
Sat Jun 28 00:33:27 2003
Message-ID: <001201c33d2e$3dc50d60$ad978dca@CDACMUMBAI.CDACINDIA.COM>
From: "Parag Godkar" <paragg@konark.ncst.ernet.in>
To: <kerberos@mit.edu>
Date: Sat, 28 Jun 2003 10:02:10 +0530
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
> A few days ago someone posted a problem here where they couldn't get
> password-less authentication working properly with OpenSSH 3.6.1 patched
> with Simon Wilkinson's GSSAPI patch and compiled with krb5. I've deleted
> the messages out so I'm not sure who it was.
>
It was I who posted the problem.
> I've since run into the same problem, it seems that OpenSSH with Simon's
> patch doesn't enable GSSAPI properly when built out of the box. Maybe a
> problem with the patched ./configure or configure.ac or autoconf or
> something. You can quickly check the status by running 'grep -i gssapi
> Makefile' and seeing if you've got the GSSAPI stuff being linked into
> the OpenSSH build or not.
>
> I found that after applying Simon's patch, I had to run the OpenSSH
> configure as this :
>
> ./configure --with-kerberos5=<path_to_MITkrb5_installed_src>
> --with-cppflags="-DGSSAPI -I/usr/local/include/gssapi"
> --with-libs="-lgssapi_krb5"
>
> and this builds a good OpenSSH with GSSAPI that does not prompt for
> passwords between systems ( tested on two RedHat Linux boxes and MIT
> krb5 1.2.8 ).
>
Great ! I will try this. I have been trying very hard but without
success. I have also tried all suggestions given to me but things
were not working.
Hope this helps me.
Thanks for the post Kerry.
Regards,
Parag Godkar
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
