Hi, Can anyone explain me How is it different from using OpenSSH with GSSAPI with and without Pam support? I saw people recommending using PAM. I am new to PAM and where can i get PAM_KRB5 module.
If we have compiled OpenSSH with PAM and Kerberos5, then will the PAM_Module get the service ticket and delegate the credentials to the secure shell. If it is so, then what will the Simon's patch do? If the pam-module is not delegating or authenticating then what is it doing?? Thanks in Advance. Srini -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 27 March 2002 00:57 To: [EMAIL PROTECTED] Subject: Re: OpenSSH won't store credentials Nicolas Williams ([EMAIL PROTECTED]) wrote: : auth_krb5_password() seems to have a bug in that it tries to : krb5_cc_resolve() 'MEMORY:'. That's not a valid ccache name in MIT krb5. : 'MEMORY:foobar' should work. I believe that it should really be using a file based ccache, rather than a memory one - it just needs to wait until after its check that the user is OK before using it. I've updated the patch at http://www.sxw.org.uk/computing/patches/openssh.html to address this, and a number of other minor issues. Cheers, Simon. ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos ********************************************************************* Disclaimer: The information in this e-mail and any attachments is confidential / privileged. It is intended solely for the addressee or addressees. If you are not the addressee indicated in this message, you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. Please advise immediately if you or your employer does not consent to Internet email for messages of this kind. ********************************************************************* ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos
