[PATCH] Kerberos support in OpenSSH by default

[Andrew J. Forgue]

To support the <a
href="http://udu.wiki.ubuntu.com/KerberizingUbuntu">KerberizingUbuntu</a> on the
UDU wiki, here's a patch to support GSSAPI (gssapi-with-mic). It doesn't apply
the patch to the udebs (AFAICT).

[Andrew J. Forgue (forgue)]

Created an attachment (id=3008)
GSSAPI/Kerberos support to ssh

Sorry, I didn't think bugzilla auto linked URLs.

[Colin Watson (cjwatson)]

This patch is insufficient for many Kerberos users; I'm told that the GSSAPI key
exchange patch is also needed.

In any event, I've recently been working with Stephen Frost to get this sorted
out in Debian, and that's now done in openssh 1:4.2p1-2. That's too late for
Ubuntu 5.10, but we'll get this in Ubuntu 6.04.

[Colin Watson (cjwatson)]

openssh 1:4.2p1-5ubuntu1 uploaded to dapper, fixing this:

openssh (1:4.2p1-2) unstable; urgency=low

  * Annotate 1:4.2p1-1 changelog with CVE references.
  * Add remaining pieces of Kerberos support (closes: #152657, #275472):
    - Add GSSAPI key exchange support from
      http://www.sxw.org.uk/computing/patches/openssh.html (thanks, Stephen
      Frost).
    - Build-depend on libkrb5-dev and configure --with-kerberos5=/usr.
    - openssh-client and openssh-server replace ssh-krb5.
    - Update commented-out Kerberos/GSSAPI options in default sshd_config.
    - Fix HAVE_GSSAPI_KRB5_H/HAVE_GSSAPI_GSSAPI_KRB5_H typos in
      gss-serv-krb5.c.

 -- Colin Watson <email address hidden> Wed, 14 Sep 2005 18:28:49 +0100