Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

What is the difference between the older openssh versions and newer openssh versions regarding kerberos?

April 26, 2017Kerberos newer Older OpenSSH versions

0

Posted

What is the difference between the older openssh versions and newer openssh versions regarding kerberos?

1 Answer

0

Posted

Openssh versions up to 3.8 could do kerberos with a protocal called “gssapi”. This protocal had to be patched into the various version of openssh. Openssh versions 3.9 and newer had kerberos built into them, but it was a protocal called “gssapi-with-mic”. The problem is that “gssapi” is not compatable with “gssapi-with-mic”, so, unless someone does some patching to their openssh, versions 3.8 and older, cannot do kerberos authentication with versions 3.9 and newer.