Re: Bug in Kerberos support for openssh.

2006-02-28 Thread sxw
On Tue, 28 Feb 2006, Eric Youngdale wrote: > When I first built openssh with kerberos turned on, I just ran configure, and > the resulting Makefile was using libgssapi.so, That's very odd. Recent OpenSSH's use krb5-config to work out which libraries to use, and MIT's krb5-config certainly tells

Re: Bug in Kerberos support for openssh.

2006-02-28 Thread sxw
[ cross-posted both to openssh-unix-dev and kerberos@mit.edu as this question has been asked on both lists ] The first and most important point to note here is that the problem you're seeing isn't a bug in OpenSSH - it's a problem with the libraries that your vendor is shipping, and in parti

Re: Refreshing SSH forwarded/delegated credentials

2005-06-06 Thread sxw
On Sat, 4 Jun 2005, Buck Huppmann wrote: > anybody know if somebody's working on the issue of how to refresh cred- > entials forwarded/delegated to a an SSH session? I occasionally start thinking about it, but I haven't yet got as far as writing any code. There's a lot of dependencies here, and

Re: MIT Kerberos: is it Thread-Safe?

2003-07-28 Thread sxw
On Tue, 22 Jul 2003, Nikola Milutinovic wrote: > As the subject says, is MIT Kerberos thread-safe and if it is, which version? > > OpenLDAP FAQ warns that MIT Kerberos libraries are not thread safe If you're purely using Kerberos V through the SASL interface, you can get around this by patching t