[33025] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos5 + SSH Questions

daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Jan 3 17:32:01 2011

From: Russ Allbery <rra@stanford.edu>
To: Brian Candler <B.Candler@pobox.com>
In-Reply-To: <20110103222630.GA8075@talktalkplc.com> (Brian Candler's message
	of "Mon, 3 Jan 2011 22:26:30 +0000")
Date: Mon, 03 Jan 2011 14:31:55 -0800
Message-ID: <878vz1ippg.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Brian Candler <B.Candler@pobox.com> writes:
> On Mon, Jan 03, 2011 at 09:53:45PM +0000, Simon Wilkinson wrote:

>> Yes. They added it in Fedora 13, and I'm told RHEL6 also ships with
>> this patch enabled. Pretty much the only vendors that don't have GSSAPI
>> key exchange support now are the BSDs.

> Any idea about the Debian-derivatives? I checked on ubuntu 10.04 and
> I didn't see this option commented out in /etc/ssh/sshd_config

Debian and Debian derivatives have had this patch applied for quite a
while.  I forget the point at which ssh-krb5 was merged in with ssh, but
it was at least by etch.  And it was available as ssh-krb5 for longer than
that.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post