Re: systematic Kerberization

[Felipe Alfaro Solana <felipe_alfaro linuxmail org>]

On Tue, 2004-05-11 at 01:47, seth vidal wrote:

> > * ssh
> I agree - having these in by default would be handy but I'm not sure
> they're in upstream

Kerberos support has been included upstream since 3.7, IIRC. In fact,
previous versions had Kerberos support, but it did only work with SSH
protocol version 1. 3.7+ does support Kerberos even when using SSH
protocol 2:

excerpt from /etc/ssh/sshd_config for OpenSSH 3.8:

# For SSH protocol version 1
KerberosAuthentication yes
KerberosOrLocalPasswd yes
KerberosTicketCleanup yes

# For SSH protocol version 2
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes