From owner-freebsd-hackers Thu Mar 23 0: 4:52 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from grimreaper.grondar.za (dhcp65.iafrica.com [196.31.1.65]) by hub.freebsd.org (Postfix) with ESMTP id EC7EB37BE5B; Thu, 23 Mar 2000 00:04:16 -0800 (PST) (envelope-from mark@grondar.za) Received: from grimreaper.grondar.za (localhost [127.0.0.1]) by grimreaper.grondar.za (8.9.3/8.9.3) with ESMTP id KAA02712; Thu, 23 Mar 2000 10:04:30 +0200 (SAST) (envelope-from mark@grimreaper.grondar.za) Message-Id: <200003230804.KAA02712@grimreaper.grondar.za> To: Kris Kennaway Cc: Sheldon Hearn , freebsd-hackers@FreeBSD.org, markm@FreeBSD.org Subject: Re: openssh + krb5 (followup) References: In-Reply-To: ; from Kris Kennaway "Wed, 22 Mar 2000 11:55:49 PST." Date: Thu, 23 Mar 2000 10:04:30 +0200 From: Mark Murray Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > On Wed, 22 Mar 2000, Sheldon Hearn wrote: > > > > Interoperability with MIT krb5 still seems to be an issue. > > > > Bleh, more FUD. The problem is in operability with non-FreeBSD openssh! > > We use supported_authentication values for KRB5 that neither Datafellows > > SSH nor OpenBSD SSH use. :-( > > Hmm..I thought OpenBSD's OpenSSH didn't support krb5, only > krb4. Regardless, we should fix this to bring ourselves in line > (preferably with both). As far as I can work out, OpenBSD uses OpenSSH+Kerberos to mean KerberosIV, whereas Datafellows meand Kerberos5. This would be a mistake made by OpenBSD, and one that is easy to fix. M -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message