Re: Accessing gssapi/kerberos principal

On Mon, 6 Mar 2006, Frank Cusack wrote:

> On March 6, 2006 4:31:01 PM -0800 Dan Peterson <petesea@bigfoot.com> wrote:
>
>> I'm attempting to add authorized_keys functionality to gssapi/kerberos
>> authorized connections, mainly to support forced command capability,
>
> doesn't .k5users do what you want?

As far as I know, .k5users is only consulted when using "ksu", not during
an ssh connection. And in my particular situation, the users don't have
home directories.

My main reason for making this patch is to provide a way to use ssh with
kerberos authentication for dedicated CVS and Subversion connections. The
users have no other access to the system.

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://www.mindrot.org/mailman/listi...enssh-unix-dev