From owner-freebsd-security Wed Feb 6 18:46: 9 2002 Delivered-To: freebsd-security@freebsd.org Received: from lists01.iafrica.com (lists01.iafrica.com [196.7.0.141]) by hub.freebsd.org (Postfix) with ESMTP id 335D537B400 for ; Wed, 6 Feb 2002 18:46:05 -0800 (PST) Received: from nwl.fw.uunet.co.za ([196.31.2.162]) by lists01.iafrica.com with esmtp (Exim 3.12 #2) id 16YeZW-0003I0-00 for freebsd-security@freebsd.org; Thu, 07 Feb 2002 04:46:02 +0200 Received: (from nobody@localhost) by nwl.fw.uunet.co.za (8.8.8/8.6.9) id EAA27751 for ; Thu, 7 Feb 2002 04:46:01 +0200 (SAST) Received: by nwl.fw.uunet.co.za via recvmail id 27745; Thu Feb 7 04:45:57 2002 Received: from localhost ([127.0.0.1]) by yacko.ops.uunet.co.za with esmtp (Exim 3.31 #1) id 16YeZQ-000F5X-00 for freebsd-security@freebsd.org; Thu, 07 Feb 2002 04:45:56 +0200 Date: Thu, 7 Feb 2002 04:45:56 +0200 (SAST) From: Gareth Hopkins X-X-Sender: ghopkins@yacko.fw.uunet.co.za To: freebsd-security@freebsd.org Subject: Problem with openssh and kerberos Message-ID: <20020207043603.S54531-100000@yacko.fw.uunet.co.za> X-Cell: +27 82 389 5389 MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi There, I am having a problem with the following. sshd is not recognising the KerberosOrLocalPasswd option in the sshd_config file. This is causing a problem with users logging into the machine with their kerberos password (without having kinited). Feb 7 04:39:10 sshd[22691]: error: /etc/ssh/sshd_config: line 58: Bad configuration option: KerberosOrLocalPasswd Feb 7 04:39:10 sshd[22691]: fatal: /etc/ssh/sshd_config: terminating, 1 bad configuration options I am using OpenSSH_2.9 FreeBSD localisations 20011202, SSH protocols 1.5/2.0, OpenSSL 0x0090601f which came with the base system of a 4.5-RC install. The following was included in my make.conf when I did a make world. KRB5_HOME= /usr/local MAKE_KERBEROS5= yes Anything else that I missed? --- Gareth Hopkins Server Operations UUNET SA, a WorldCom Company (o) +27.21.658.8700 (f) +27.21.658.8552 (m) +27.82.389.5389 http://www.uunet.co.za 08600 UUNET (08600 88638) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message