> Hi Jeff,
>
> On 15-Sep-00 Jeffrey Altman wrote:
> >> On Thu Sep 14 19:07:01 2000, Jeffrey Altman said:
> >>
> >> I'm not sure what you mean by 'patch'. I just downloaded SSH-2.3.0
> >> from
> >> ssh.com and it's supposed to be a brand-new version. In fact, my
> >> understanding is that Kerberos support is one of the things just added
> >> to
> >> this new release.
> >>
> >> Mike
> >
> > then let me rephrase. The Kebreros support in SSH-2.3.0 was written
> > to a version of the MIT Kerberos 5 libs that is pre 1.2.x. Probably
> > one of the 1.0.x versions which used the old name for the crypto
> > library libcrypto.a (conflicts with OpenSSL crypto) and did not
> > require the resolver library.
>
> I know for sure the ssh-2.3.0 is made to compile with krb-1.1.1. A few
> weeks ago krb-1.1.2 was in beta. I have never heard of krb-1.2.x. The
> libk5crypto.x lib has been renamed for some time now. As far as I know I'm
> the only one that has written a patch for the older ssh-1.2.30 protocol
> which I did a few months ago.
>
> Carl
Krb5 1.1.2 is a version of 1.1.1 that contains no feature changes
just fixes for the CERT warning that were sent out last Feb regarding
buffer overflows. 1.1.x does not use the resolver.
Krb5 1.2.1 is the current release of Krb5 that was released in June.
1.2.x does use the resolver. It is necessary for the implementation
of DNS SRV and TXT record support. 1.2.x went into beta last
January.
libk5crypto. was renamed during the 1.1.x release.
I know nothing about the Krb5 support in ssh.2.3.0. All my comments
are based entirely upon reading the problem reports that Mike has sent
to this list. This missing libraries indicate that the support does
not work with the 1.2.x distributions. The use of the older crypto
library name appears to indicate a pre 1.1.x distribution.
Jeffrey Altman * Sr.Software Designer
The Kermit Project * Columbia University
612 West 115th St * New York, NY * 10025 * USA
http://www.kermit-project.org/ * [EMAIL PROTECTED]
