Amos Shapira wrote: > 2010/1/28 Michael Ben-Nes <m...@epoch.co.il>: > >> Hi, >> What is gssapi good for? >> Read about it in wikipedia but I am not aware of apps that use it. >> Basically I disable it in new servers to get faster response. >> > > I'm curios too. Couldn't find any use for it and also disable it as > part of our SOE. > > Anyone? > > --Amos > >
GSSAPI is part of Kerberos suit. It is useful for "single-authentication systems". E.G. you log into your own workstation or terminal once, and then you are authenticated to log into all systems within Kerberos realm without being prompted for password. ActiveDirectory, in particular, uses modified version of Kerberos protocols. I never tried it myself, but I guess it'd be possible to let people with accounts in active directory have access to systems with SSH server without having to reauthenticate. -- Ilya A. Volynets-Evenbakh http://www.total-knowledge.com _______________________________________________ Linux-il mailing list Linux-il@cs.huji.ac.il http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il