OpenSSH with latest GSSAPI patch now storing credentials !

2002-03-27 Thread Someone
Hi, I just wanted to let you know, especially Simon, that I just tryed out your latest patch for OpenSSH 3.1p1 and it works perfect, the credentials are finaly stored and a klist will show my credential, great work !!! Just a little remark, I am running sshd in debugging mode and the : debug

Re: OpenSSH with latest GSSAPI patch now storing credentials !

2002-03-27 Thread Simon Wilkinson
Someone ([EMAIL PROTECTED]) wrote: : Just a little remark, I am running sshd in debugging mode and the : : debug1: No GSSAPI credentials stored : message, still appears, I think it shoudln't appear anymore. Right. In order to under stand why this message is correct, you need to know a bit about

Re: OpenSSH with latest GSSAPI patch now storing credentials !

2002-03-27 Thread Nicolas Williams
On Wed, Mar 27, 2002 at 06:21:58PM +, Simon Wilkinson wrote: > : Now I have a question, did you implement an option or something similar > : so that it is possible to always get a forwardable ticket when logging > : in with SSH ? Is that possible ? > > Its possible. I personally don't use a

Re: OpenSSH with latest GSSAPI patch now storing credentials !

2002-03-27 Thread Marc Horowitz
[EMAIL PROTECTED] (Simon Wilkinson) writes: >> However, is this overiding something that should be set in a kerberos >> config file? Yes, it is. The patch you sent forces initial tickets to be forwardable, regardless of what the kerberos config file requests. With MIT krb5, you can set the for

Re: OpenSSH with latest GSSAPI patch now storing credentials !

2002-04-02 Thread Someone
Marc Horowitz wrote: > [EMAIL PROTECTED] (Simon Wilkinson) writes: > > >>>However, is this overiding something that should be set in a kerberos >>>config file? >>> > > Yes, it is. The patch you sent forces initial tickets to be > forwardable, regardless of what the kerberos config file reque

Re: OpenSSH with latest GSSAPI patch now storing credentials !

2002-04-02 Thread Someone
Marc Horowitz wrote: > [EMAIL PROTECTED] (Simon Wilkinson) writes: > > >>>However, is this overiding something that should be set in a kerberos >>>config file? >>> > > Yes, it is. The patch you sent forces initial tickets to be > forwardable, regardless of what the kerberos config file reque