Re: Windows SSH client that uses tickets not obtained from AD login(opensource/free)

2005-07-11 Thread vadim
Hallo, another option would be to use ssh under cygwin - what actually I do. You only have to compile ssh yourself with either Heimdal, or with MIT Kerberos. You can obtain TGT using either kinit, or copy TGT from LSA to an ording credentials cache using ms2mit program from KfW. Regards, vadim ta

Re: Windows SSH client that uses tickets not obtained from AD login(opensource/free)

2005-07-11 Thread jay alvarez
Hi Jeff, I've already been to that site as most of my google searches points me to it, but my problem is that the place I work in is a government institution which benifits mostly from tools that are opensource and free. Is there a freeware version of kermit?:) --- Jeffrey Altman <[EMAIL PROT

Re: Windows SSH client that uses tickets not obtained from AD login

2005-07-11 Thread Jeffrey Altman
Kermit 95 provides support for SSH with GSS and it derives its tickets from KFW. The version distributed by Columbia University is old and not quite up to date but it works. jay alvarez wrote: > Hi, > Do you know any windows ssh client that can use > gss

Windows SSH client that uses tickets not obtained from AD login

2005-07-11 Thread jay alvarez
Hi, Do you know any windows ssh client that can use gssapi authentication and not using SSPI(used by vintela and CSS putty versions)wherein it uses tickets that were obtained from an Active Directory login? I have downloaded KFW from MIT and I have successfully obtain tickets using Leash. I tried

Re: krb5-1.4.1 build failure on FreeBSD 5.4 (EAI_NODATA), and a workaround

2005-07-11 Thread Russ Allbery
Fred Dushin <[EMAIL PROTECTED]> writes: > I'm getting a krb5-1.4.1 build failure on FreeBSD 5.4-RELEASE: > .../krb5-1.4.1/src/lib/krb5/os/hst_realm.c: In function > `krb5int_translate_gai_error': > .../krb5-1.4.1/src/lib/krb5/os/hst_realm.c:370: error: `EAI_NODATA' > undeclared (first use in this

krb5-1.4.1 build failure on FreeBSD 5.4 (EAI_NODATA), and a workaround

2005-07-11 Thread Fred Dushin
I'm getting a krb5-1.4.1 build failure on FreeBSD 5.4-RELEASE: .../krb5-1.4.1/src/lib/krb5/os/hst_realm.c: In function `krb5int_translate_gai_error': .../krb5-1.4.1/src/lib/krb5/os/hst_realm.c:370: error: `EAI_NODATA' undeclared (first use in this function) .../krb5-1.4.1/src/lib/krb5/os/hst_

Re: Assertion failuers

2005-07-11 Thread fariba
i relinked our other application(mureqd) with the new 2.6 (thread disabled) and released it, to see if the process functions better now. Phil Dibowitz wrote: On Sun, Jul 10, 2005 at 03:53:40PM -0400, Sam Hartman wrote: "fariba" == fariba <[EMAIL PROTECTED]> writes: far

Re: Assertion failuers

2005-07-11 Thread Phil Dibowitz
On Sun, Jul 10, 2005 at 03:53:40PM -0400, Sam Hartman wrote: > > "fariba" == fariba <[EMAIL PROTECTED]> writes: > > fariba> i work with phil as well. i was wondering what are the > fariba> proc/con of using these flags: > > fariba> --disable-shared --enable-static --disable-threa

Re: PAM - Kerberos issues

2005-07-11 Thread Madhusudan Singh
Matt Payton wrote: > Madhusudan Singh wrote: > > [...] > >> Thanks for your response. How do I tell kerberos installation where to >> find the compiled pam modules ? > > I would guess that you'll have to recompile kerberos to include PAM, and > as part of ./configure you'd tell it where the PAM

PAM - Kerberos issues

2005-07-11 Thread Madhusudan Singh
Hi I am trying to install an openafs server (well, trying to configure it) as a MIT kerberos 5 client (authentication in a realm other than the cell name) on a Slackware 10.1 machine running kernel 2.4.29. Well, Slack does not include PAM, so I installed it (under /usr/local/linux-pam) *af

Re: PAM - Kerberos issues

2005-07-11 Thread Madhusudan Singh
Matt Payton wrote: > Madhusudan Singh wrote: >> Hi >> >> I am trying to install an openafs server (well, trying to >> configure >> it) as a MIT kerberos 5 client (authentication in a realm other than the >> cell name) on a Slackware 10.1 machine running kernel 2.4.29. Well, Slack

Re: Need some tips on kerberizing our ENTIRE network

2005-07-11 Thread Wyllys Ingersoll
Fred Dushin wrote: A big part of the problem is HTTP (big surprise -- yet another protocol that is being used for purposes for which it was not designed). Yes, IIS supports GSS authentication via SPNEGO, but I have not been able to decipher whether data protection is offered; anecdotal evide

Re: Assertion failuers

2005-07-11 Thread Ken Raeburn
On Jul 11, 2005, at 04:59, fariba wrote: thank you. may be i should explain what o really want to know: why by disabling the threads our problem on 2.6 went away? why using these flags was suggested? is multi-threading support kind of buggy? There have been problems on some systems in determin

Re: Assertion failuers

2005-07-11 Thread fariba
thank you. may be i should explain what o really want to know: why by disabling the threads our problem on 2.6 went away? why using these flags was suggested? is multi-threading support kind of buggy? Sam Hartman wrote: "fariba" == fariba <[EMAIL PROTECTED]> writes: farib