Comment 8 for bug 18218

Message-ID: <email address hidden>
Date: Tue, 11 Jan 2005 01:07:01 +0000
From: Colin Watson <email address hidden>
To: Matthijs Mohlmann <email address hidden>, <email address hidden>
Cc: Sam Hartman <email address hidden>, <email address hidden>
Subject: Re: Bug#275472: Support for kerberos in ssh

On Fri, Oct 08, 2004 at 01:18:44PM +0200, Matthijs Mohlmann wrote:
> Package: ssh
> Version: 1:3.8.1p1-8
> Severity: wishlist
>
> In newer versions ssh has gssapi-with-mic implemented. When an older
> client connects to the new server with a ticket he gets a failure
> because the client has only gssapi. It would be nice if ssh compiled
> with gssapi. Then also can ssh-krb5 merged with ssh. The OpenSSH
> developers have merged the kerberos patch with ssh so there is also no
> need for an extra package in sid.

Even with OpenSSH 3.9p1 in experimental, the diff to openssh-krb5 seems
to be substantial. Sam, do you know what the current state of having all
this stuff merged upstream is?

Compiling with gssapi involves linking with some extra libraries, at
least one of which are not currently Priority: standard, and that would
inconvenience people who don't use Kerberos who are trying to build
small systems. I'm inclined to think that a separate build is still a
good idea for the moment.

Cheers,

--
Colin Watson [<email address hidden>]