Re: Heimdal and r* client programs

[Tillman Hodgson <tillman@seekingfire.com>]

On Fri, Aug 16, 2002 at 08:37:14PM +0100, Simon Wilkinson wrote:
> This list probably isn't the appropriate place to get into an in depth
> discussion, but I just felt I should correct a really common
> misunderstanding:
> 
> The GSSAPI patches _only_ deal with authentication via already gained
> tickets, and forwarding tickets to the remote machine.

That does clarify things, thanks.

> Authentication via password is handled by the stock OpenSSH code. We use
> PAM to handle password checking against the KDC, but there is code in
> OpenSSH that can also do this. I'd suggest asking on one of the openssh
> lists for more details.

I'll give that a try :-)

- Tillman

-- 
Happiness is wanting what you get, NOT getting what you want.
	Robert Heinlein