[28651] in Kerberos

home help back first fref pref prev next nref lref last post

Re: SSH1 - gss-api - kerberos - java

daemon@ATHENA.MIT.EDU (Nicolas Williams)
Fri Nov 2 17:04:28 2007

Date: Fri, 2 Nov 2007 16:04:02 -0500
From: Nicolas Williams <Nicolas.Williams@sun.com>
To: Ranga Samudrala <Ranga_Samudrala@bmc.com>
Message-ID: <20071102210402.GX11498@Sun.COM>
Mail-Followup-To: Ranga Samudrala <Ranga_Samudrala@bmc.com>, Kerberos@mit.edu
Mime-Version: 1.0
Content-Disposition: inline
In-Reply-To: <51029982-9A85-4A4F-9DC9-152C38CC5FD2@bmc.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On Fri, Nov 02, 2007 at 04:42:56PM -0400, Ranga Samudrala wrote:
> I am trying to develop a Java SSH client targeting a version of  
> Kerberised SSH1 server talking GSS-API. Does anybody know of anybody  
> else dealing with this scenario? Is there a place I can find SSH1  
> Java API that support communication using GSS-API?

The "Kerberized SSHv1" that floated about some time back is really not
something that you want to use.  Besides being non-standard, there were
issues with it (I don't recall the details).  Also, it does not use the
GSS-API, so you'd need a Java implementation of raw Kerberos.  You could
probably use the underlying raw Kerberos V implementation in JGSS, but
you may have to hack on the [fortunately now open source] JDK.

I urge you to upgrade to SSHv2.

Nico
-- 
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post