[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Problem with OpenSSH

Brandon S. Allbery KF8NH wrote:
>
> On Aug 1, 2007, at 12:10 , Antoine MILLET wrote:
>
>> *but*
>> OpenSSH don't log users without a keytab containing the host 
>> principal... Without this keytab I can log on the host.
>
> This is correct behavior.  Look up "Zanarotti attack" for details of 
> why this is done.  (Note that this does not apply to console logins, 
> hence kinit and gdm don't require it.)
>
Thanks a lot for this answer.

And any idea about the fact that openssh doesn't forward ticket and 
request password each time I want to log on another computer in our park ?

Thanks in advance.

-- 
Cordialement.