From owner-freebsd-stable Tue May 22 15:48:42 2001 Delivered-To: freebsd-stable@freebsd.org Received: from shell1.nominum.com (shell1.nominum.com [204.152.187.163]) by hub.freebsd.org (Postfix) with ESMTP id 1E18F37B627 for ; Tue, 22 May 2001 15:48:33 -0700 (PDT) (envelope-from Peter.Losher@nominum.com) Received: by shell1.nominum.com (Postfix, from userid 10188) id EDA3022641; Tue, 22 May 2001 15:47:49 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by shell1.nominum.com (Postfix) with ESMTP id E830F20F01 for ; Tue, 22 May 2001 15:47:49 -0700 (PDT) Date: Tue, 22 May 2001 15:47:49 -0700 (PDT) From: Peter Losher To: Subject: OpenSSH and Krb5, FreeBSD style... Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG O.k., after banging my head against the wall with Heimdal and MIT libs fighting over each other, I cam across this closed PR: http://www.freebsd.org/cgi/query-pr.cgi?pr=20504 Which seems to indicate that the branch of OpenSSH that FreeBSD uses now (as of March 6th) has support for Krb5 Authentication on both the server and client ends workng with the integrated Heimdal libs. Is this true? If so, is there a web site (or man pages) describing what config variables etc. are needed to set this up? I can't find it in the example ssh_config and sshd_config. Also, is there a man page (or web site) which describes how to get up Krb5 using the integrated Heimdal package? (I have previously used only MIT Krb5 from ports), All the Kerberos stuff I have seen on the 4.3-STABLE system so far is all Krb4 (Project Athena, etc) and no Krb5 binaries (kinit, kadmin, ksu, etc.) although the libkrb5* libraries are in /usr/lib/ And ideas, suggestions where to look? Thanks - Peter Losher -- Peter.Losher@nominum.com - [ Systems Admin. | Nominum, Inc. ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message