Subject: | |
From: | |
Reply To: | |
Date: | Fri, 22 Aug 2008 23:38:22 -0400 |
Content-Type: | text/plain |
Parts/Attachments: |
|
|
Jon Peatfield wrote:
> On Fri, 22 Aug 2008, Wayne Betts wrote:
>
> <snip>
>>> Hi Wayne,
>>> This is not an oops, it is on purpose.
>>> From the README in that directory
>>>
>>> "These versions of openssh have been patched to be able to use
>>> both the old and the new versions of gssapi. This allows them
>>> to do kerberos authentication with both kerberized openssh before
>>> openssh 3.9, and after openssh 3.9"
>>>
>>> But we do not have the openssh server configured so that it does
>>> kerberos
>>> only, like we do in SLF's version of openssh-server.
>>> Why?
>>> Well, if we did, you'd be worrying alot more than just having it do
>>> aklog
>>> when you log in. You wouldn't be able to log in any other way than
>>> kerberos. And I don't think you want that.
>>> So we have it configured to have the same settings that you get
>>> with the
>>> regular openssh-server that you get from RedHat.
>>
>> Thanks for the response Troy, but I'll have to put on the SL dunce
>> hat and sit in a corner for a while, because I've searched in vain
>> for the README or directory you're referring to.
>
> Look for example in:
>
>
> ftp://ftp.scientificlinux.org/linux/scientific/46/i386/contrib/RPMS/openssh/
>
>
> I note that the text of the README is different in:
>
>
> ftp://ftp.scientificlinux.org/linux/scientific/46/x86_64/contrib/RPMS/openssh/
>
>
> but that may be intentional.
>
> If you don't want the extra kerb stuff you may not want these contrib
> packages.
>
> -- Jon
Thank you, Jon. The mirror site at my facility doesn't have the README
files, and a quick sampling of other mirrors show some have them and
some don't. <I'm now removing the dunce hat from my head, but still
clutching it tightly.>
-Wayne
|
|
|