From owner-freebsd-stable Tue May 22 18:16:35 2001 Delivered-To: freebsd-stable@freebsd.org Received: from gw.nectar.com (gw.nectar.com [208.42.49.153]) by hub.freebsd.org (Postfix) with ESMTP id ED56637B422 for ; Tue, 22 May 2001 18:16:29 -0700 (PDT) (envelope-from nectar@nectar.com) Received: from shade.nectar.com (gw.nectar.com [208.42.49.153]) by gw.nectar.com (Postfix) with ESMTP id 4EDF918C9C; Tue, 22 May 2001 20:16:29 -0500 (CDT) Received: (from nectar@localhost) by shade.nectar.com (8.11.3/8.11.3) id f4N1GTH00680; Tue, 22 May 2001 20:16:29 -0500 (CDT) (envelope-from nectar) Date: Tue, 22 May 2001 20:16:28 -0500 From: "Jacques A. Vidrine" To: Peter Losher Cc: freebsd-stable@freebsd.org Subject: Re: OpenSSH and Krb5, FreeBSD style... Message-ID: <20010522201628.A449@shade.nectar.com> Mail-Followup-To: "Jacques A. Vidrine" , Peter Losher , freebsd-stable@freebsd.org References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from Peter.Losher@nominum.com on Tue, May 22, 2001 at 03:47:49PM -0700 X-Url: http://www.nectar.com/ Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, May 22, 2001 at 03:47:49PM -0700, Peter Losher wrote: > O.k., after banging my head against the wall with Heimdal and MIT > libs fighting over each other, I cam across this closed PR: > > http://www.freebsd.org/cgi/query-pr.cgi?pr=20504 > > Which seems to indicate that the branch of OpenSSH that FreeBSD uses now > (as of March 6th) has support for Krb5 Authentication on both the server > and client ends workng with the integrated Heimdal libs. Is this true? Yes. > If so, is there a web site (or man pages) describing what config variables > etc. are needed to set this up? I can't find it in the example ssh_config > and sshd_config. > > Also, is there a man page (or web site) which describes how to get up Krb5 > using the integrated Heimdal package? (I have previously used only MIT Krb5 > from ports), All the Kerberos stuff I have seen on the 4.3-STABLE system so > far is all Krb4 (Project Athena, etc) and no Krb5 binaries (kinit, kadmin, > ksu, etc.) although the libkrb5* libraries are in /usr/lib/ > > And ideas, suggestions where to look? > > Thanks - Peter Losher > -- > Peter.Losher@nominum.com - [ Systems Admin. | Nominum, Inc. ] > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > -- Jacques Vidrine / n@nectar.com / jvidrine@verio.net / nectar@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message