On Wed, Jan 18, 2012 at 2:22 PM, Bill Sommerfeld wrote:
> They're needed so that sshd correctly uses solaris's version of PAM and audit
> and other subsystems like that.
OpenSSH/portable already works with Solaris' PAM and default projects.
But the latest documentation I can find on SunSSH is here:
"These parts of SunSSH 1.5 are quite different from OpenSSH code:
PAM
GSS-API
privilege separation implementation
auditing code
g11n (not present in OpenSSH)
we support HW acceleration through the OpenSSL PKCS#11 engine by default"
http://hub.opensolaris.org/bin/view/Community+Group+security/SSH
However, the only Solaris specific change I'm seeing for OpenSSH
portable in regards to Solaris in the last couple of years is a mod
for project support;
ftp://ftp.ca.openbsd.org/pub/OpenBSD/OpenSSH/portable/ChangeLog
So I'm not seeing a whole lot of incentive for me to stick with SunSSH
since I can't even easily find documentation of what's been patched in
SunSSH in the past 2-3 years. Unless someone's claiming that OpenSSH
just doesn't work with Solaris' implementation of PAM...?
q.v. http://blogs.oracle.com/janp/entry/sunssh_and_openssl_enhancements_in,
and https://www.google.com/search?q=site%3Amail.opensolaris.org+SunSSH
_______________________________________________
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
