| View previous topic :: View next topic |
| Author |
Message |
wobbly
Tux's lil' helper
Joined: 23 Apr 2003
Posts: 146
|
 Posted: Fri Apr 07, 2006 4:32 pm Post subject: ssh, mit-krb5, gssapimitm patch? |
 |
|
Does anyone have experience using this openssh patch
http://www.sxw.org.uk/computing/patches/openssh-3.8p1-gssapimitm.patch
to get kerberos working with GSSAPIAuthentication?
I got the patch to apply to openssh-4.2_p1-r1, and I have
a kerberos ticket from kinit, but I cannot get the machine I'm trying
to ssh to to accept my ticket. Any suggestions?
My ssh_config
| Code: |
# $OpenBSD: ssh_config,v 1.20 2005/01/28 09:45:53 dtucker Exp $
# This is the ssh client system-wide configuration file. See
# ssh_config(5) for more information. This file provides defaults for
# users, and the values can be changed in per-user configuration files
# or on the command line.
# Configuration data is parsed as follows:
# 1. command line options
# 2. user-specific file
# 3. system-wide file
# Any configuration value is only changed the first time it is set.
# Thus, host-specific definitions should be at the beginning of the
# configuration file, and defaults at the end.
# Site-wide defaults for some commonly used options. For a comprehensive
# list of available options, their meanings and defaults, please see the
# ssh_config(5) man page.
Host *
# ForwardAgent no
# ForwardX11 no
ForwardX11 yes
# added by jgw
ForwardX11Trusted yes
# RhostsRSAAuthentication no
# RSAAuthentication yes
# PasswordAuthentication yes
# HostbasedAuthentication no
# BatchMode no
# CheckHostIP yes
# AddressFamily any
# ConnectTimeout 0
# StrictHostKeyChecking ask
# IdentityFile ~/.ssh/identity
# IdentityFile ~/.ssh/id_rsa
# IdentityFile ~/.ssh/id_dsa
# Port 22
# Protocol 2,1
# Cipher 3des
# Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc
# EscapeChar ~
# added to get kerberos working
GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes
GssapiEnableMitmAttack yes
#PreferredAuthentications gssapi,external-keyx,publickey,keyboard-interactive
|
|
|
| Back to top |
|
 |
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
