[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [OpenAFS-devel] New OpenSSH
Simon Wilkinson wrote:
> Garrett Wollman wrote:
> > <<On Wed, 25 Feb 2004 00:02:31 +0000 (GMT), firstname.lastname@example.org said:
> >>Also note that gssapi-with-mic is incompatible with the 'gssapi' userauth
> >>authentication method in 3.7, and earlier in my patches. There is also no
> >>support for GSSAPI key exchange.
> > So those of us who depend on this are still stuck with 3.6p1?
> You're stuck with patched 3.6p1 until such time as patches are made
> available for 3.8 :-) These are being worked on, but time is in short
> supply at present. Note that the I-D has changed since the patches for
> 3.6p1, and a new method of verifying the key exchange is now used (the
> previous method was vulnerable to MITM attacks)
I have some mods to 3.8 (which I have sent to Simon) to recognize selected
older versions of 3.6, and use the gssapi rather then gssapi-with-mic.
They during a conversion. As I too am waiting for Simon's next set of
If you are really desperate contact me offline.
> OpenAFS-devel mailing list
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439