[17306] in Athena Bugs

home help back first fref pref prev next nref lref last post

Re: sun4 8.3.15: ssh

daemon@ATHENA.MIT.EDU (Greg Hudson)
Sat Oct 23 12:24:06 1999

Message-Id: <199910231623.MAA03250@small-gods.mit.edu>
To: Nickolai Zeldovich <kolya@MIT.EDU>
cc: bugs@MIT.EDU
In-Reply-To: Your message of "Sat, 23 Oct 1999 01:36:31 EDT."
             <199910230536.BAA02849@SEVEN-UP.MIT.EDU> 
Date: Sat, 23 Oct 1999 12:23:59 -0400
From: Greg Hudson <ghudson@MIT.EDU>

By default, when using krb5 authentication, ssh passes the whole krb5
principal over the wire and then the receiving sshd calls
krb5_aname_to_localname() on that.  That routine is fairly flexible,
and we may be able to just configure in krb5.conf that
foo.*@ATHENA.MIT.EDU should map to foo.  I'll look into that.

home help back first fref pref prev next nref lref last post