Re: dfs/dce and openssh

On 10 May 2007, at 12:21, Douglas E. Engert wrote:
> Perry Smith wrote:
>> I searched google and did not find any hits on this being solved.
>>
>> I want to get ssh so I can the dsa/rsa style password it in an
>> environment that uses dfs/dce authentication if that is possible (and
>> it has not already been solved). In other words, I want to be able
>> to log into a host as a dfs/dce user without typing my password.
>
>
> DCE uses Kerberos 5, so the GSSAPI code in SSH should work. Delegation
> should also work, so you can get tickets for DFS.

The problem here is that you can't use OpenSSH's DSA/RSA key-based
authentication and still have credentials on the machine that you've
logged in to. I don't know enough about DCE to be able to comment on
that specific case, but in a standard Kerberos environment, you'd
need to run 'kinit' after login in order to have credentials. There's
no way (that I'd want to deploy) of getting around this.

Simon.

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/lis...enssh-unix-dev