OpenSSH protocol version 2 doesn't support Kerberos authentication

OpenSSH protocol version 2 doesn't support Kerberos authentication

[Felipe Alfaro Solana]

Hi!

This is simply an informative message.

I have just deployed Kerberos authentication on my LAN. However, I have
been smashing my head against a wall everytime I tried to configure and
use OpenSSH with Kerberos authentication.

Such situation led me to browse the OpenSSH sources and, to my dismay, I
have found that Kerberos V5 authentication is *not* implemented for
protocol version 2, only in protocol version 1. Just take a look at
sshconnect1.c and sshconnect2.c to check.

So I reconfigured all my RHL9 boxes to just use Protocol 1. Now, OpenSSH
and Kerberos work nicely and it's just beautiful to be able to log on at
my laptop and being able to ssh to any machine in my LAN without
supplying a password. This is Unix single-sign-on came true...

-- 
Please AVOID sending me WORD, EXCEL or POWERPOINT attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html
Linux Registered User #287198

Re: OpenSSH protocol version 2 doesn't support Kerberos authentication

[Sean Neakums]

Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> writes:

> Such situation led me to browse the OpenSSH sources and, to my dismay, I
> have found that Kerberos V5 authentication is *not* implemented for
> protocol version 2, only in protocol version 1. Just take a look at
> sshconnect1.c and sshconnect2.c to check.

I don't use Kerberos, but Debian ships a ssh-krb5 package which claims
to support authentication via Kerberos for both v1 and v2 connections.

http://packages.debian.org/unstable/net/ssh-krb5.html

-- 
Sean Neakums - <sneakums@zork.net>