OpenBSD Journal

Kerberos/GSS-API Support in OpenSSH

Contributed by jose on from the more-experimental-patches dept.

Vegas writes: " The GSS-API is a generic API for doing client-server authentication. It stands for Generic Security Services Application Programming Interface and its included with most major Kerberos 5 distributions. OpenSSH support of this API and kerberos makes it even more secure. To know more about it and to download package for openssh+gssapi, which is openssh-3.6.1p2 with version 20030430 of the GSS-API patches, click here ."

These patches look like they fix some bugs and add some features, which are worthy goals. Have a look at the patch and see if it can't be included in future OpenSSH codebases.

(Comments are closed)

Comments

  1. By Vegas () vegas@box.sk on http://bsd.box.sk

    Just to notice you about a new *BSD site: http://bsd.box.sk . This is where this news has been taken from and there is much more avaible there. The site is new (it only has a week) but it aim is to bring you all you need about not only OpenBSD, but all the BSD tree. Participate to our growing, you surely won't be disappointed after all. Vive BSD !!

    Comments

    1. By Anonymous Coward () on

      In deadly we trust!

      Comments

      1. By Vegas () vegas@box.sk on http://bsd.box.sk

        So do i, but its only OpenBSD related, bsd.box.sk bring stuff from all the *BSD tree, including OpenBSD.

    2. By viva w4rx0r? () on

      At last, BSD news to complement the keygen search engine from astalavista.box.sk. That should really enhance *BSD credibility.

      Comments

      1. By Vegas () vegas@box.sk on http://bsd.box.sk

        It is the site of a bunch of motivated people wanting to help the community. We have nothing to do with astalavista and i don't even know who run it. You should not judge a site by it dns but by it contain, my guess..

  2. By djm () on

    This has been brought up on this site at least three times. Each time we have stated that asking for the patch to be integrated is not going to speed things up. If people want to see this patch integrated, it needs to be audited and reduced in size.

    A few developers have been doing just this, with *zero* outside assistance (for all the talking).

    Comments

    1. By jose () on http://monkey.org/~jose/

      hurr ... my bad, i should have investigated that a bit more, it did feel familiar. you're right, but then again, slashdot posts duplicates frequently :) ....

      sorry about that.

Latest Articles

Credits

Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]