Re: Heimdal and openssh

2006-01-11 Thread Aaron M. Ucko
Russ Allbery <[EMAIL PROTECTED]> writes: > Juha Jäykkä <[EMAIL PROTECTED]> writes: > >>> * Interoperate with ssh-krb5 << 3.8.1p1-1 servers, which used a >>> slightly >>> different version of the gssapi authentication method (thanks, Aaron >>> M. Ucko; closes: #328388). > >> Perhaps thi

Re: Heimdal and openssh

2006-01-09 Thread Russ Allbery
Juha Jäykkä <[EMAIL PROTECTED]> writes: >> * Interoperate with ssh-krb5 << 3.8.1p1-1 servers, which used a >> slightly >> different version of the gssapi authentication method (thanks, Aaron >> M. Ucko; closes: #328388). > Perhaps this is THE patch which makes them all work together w

Re: Heimdal and openssh

2005-12-28 Thread Juha Jäykkä
> The ssh-krb5 package is basically in deep freeze since it's likely going > to get removed in favor of some sort of transition package to > openssh-client. This is more than fine for me (as long as security patches are issued in the proper Debian way) - we use mostly Debian/stable precisely for t

Re: Heimdal and openssh

2005-12-27 Thread Russ Allbery
Juha Jäykkä <[EMAIL PROTECTED]> writes: > So it seems, but your ssh-krb5 was not sarge's version. I highly doubt that any of the changes between the current unstable ssh-krb5 and the version in sarge would have made any difference. Anyway, it works for me from sarge as well. The ssh-krb5 packag

Re: Heimdal and openssh

2005-12-27 Thread Juha Jäykkä
> > 1) Ssh-krb5 (sarge) and openssh 4.2 (sid) will not talk GSSAPI to each > Er, huh? [...] > Works fine for me. So it seems, but your ssh-krb5 was not sarge's version. Still, my understanding of the stuff on openssh lists is the same despite your getting it to work. Perhaps Debian has done some b

Re: Heimdal and openssh

2005-12-22 Thread Russ Allbery
Juha Jäykkä <[EMAIL PROTECTED]> writes: > 1) Ssh-krb5 (sarge) and openssh 4.2 (sid) will not talk GSSAPI to each > other. I gather from openssh mailing lists that no versions of openssh > <4 and >4 will ever talk GSSAPI together due to some security patches > made. Thus this is not a Debian -rela

Heimdal and openssh

2005-12-22 Thread Juha Jäykkä
Hi! I am in the process of implementing Heimdal and OpenAFS into our laboratory network (already using LDAP for NSS). The network contains a mixed environment of sarge and sid (even one etch, but I plan to upgrade that to sid soon). Now, the version of Heimdal will be 0.7.1, which has been in expe