[27238] in Kerberos
Re: SSH with Multiple Interfaces
daemon@ATHENA.MIT.EDU (Simon Wilkinson)
Thu Jan 18 17:50:55 2007
In-Reply-To: <87vej4ge9d.fsf@windlord.stanford.edu>
Mime-Version: 1.0 (Apple Message framework v752.3)
Message-Id: <F4B78EDF-7AC6-4923-8B32-3C9D2CE67A48@sxw.org.uk>
From: Simon Wilkinson <simon@sxw.org.uk>
Date: Thu, 18 Jan 2007 22:49:52 +0000
To: Russ Allbery <rra@stanford.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 18 Jan 2007, at 22:29, Russ Allbery wrote:
>
> Looks like you're running into this:
>
> <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=212480>
>
> I haven't heard anything further about this since this bug report,
> and I'm
> not sure if either Simon or OpenSSH upstream are interested.
http://bugzilla.mindrot.org/show_bug.cgi?id=928
I can't speak for OpenSSH upstream (there's been a fix in that bug
report from Markus since 2004), but there's a fix for this problem in
my GSSAPI patch set. You need 'GSSAPIStrictAcceptorCheck no' in your
sshd configuration file, and to be using a relatively recent Kerberos
library.
Simon.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
