From owner-freebsd-security@FreeBSD.ORG  Thu Jan 15 07:26:22 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0A10A16A4D9
	for <freebsd-security@freebsd.org>;
	Thu, 15 Jan 2004 07:26:22 -0800 (PST)
Received: from nbh-gw.newchem.ru (platan.newchem.ru [81.3.149.218])
	by mx1.FreeBSD.org (Postfix) with ESMTP id AC50743D58
	for <freebsd-security@freebsd.org>;
	Thu, 15 Jan 2004 07:26:18 -0800 (PST)
	(envelope-from illich@newchem.ru)
Received: from 127.0.0.1 ([192.168.204.4])
	by nbh-gw.newchem.ru (8.12.9/8.12.7) with ESMTP id i0FFQHUt046592
	for <freebsd-security@freebsd.org>;
	Thu, 15 Jan 2004 18:26:17 +0300 (MSK)
	(envelope-from illich@newchem.ru)
X-AntiVirus: Checked by Dr.Web (http://www.drweb.net)
Date: Thu, 15 Jan 2004 18:26:16 +0300
From: Illia Baidakov <illich@newchem.ru>
X-Mailer: The Bat! (v1.62q) Personal
X-Priority: 3 (Normal)
Message-ID: <1708327497.20040115182616@newchem.ru>
To: freebsd-security@freebsd.org
In-Reply-To: <20040115075502.V4761@yvguvhz.pnzhyhf.bet>
References: <287929591.20040115125802@newchem.ru>
 <20040115075502.V4761@yvguvhz.pnzhyhf.bet>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Re[2]: kerberos5 authentication of ssh connections
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Illia Baidakov <illich@newchem.ru>
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Jan 2004 15:26:22 -0000

Hello

Thursday, January 15, 2004, 4:57:49 PM, you wrote:

ACJ> Have you tried the port 'openssh-portable'?  I have been using it with
ACJ> krb5 authentication for about a month.  It seems to be working fine.

Namely 3.7.1p2.

After reading over the man sshd_config once again I have caught
difference between KerberosAuthentication and GSSAPIAuthentication
types and between them and using pam_krb5.

Apologize for disturbance.

-- 
Best regards, Illia Baidakov.