Slashdot Mirror
Kerberos Support In OpenSSH
Dan writes "Marshall Vale writes on behalf of the MIT Kerberos team and several other parties interested in the availability of Kerberos authentication for the SSH protocol. Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Marshall says that Kerberos support within OpenSSH may be incomplete and needs more work. In particular, implementing draft-ietf-secsh-gsskeyex in addition to any other Kerberos mechanisms will better serve the needs of Kerberos community. Secondly, he says that they would like to reduce user confusion associated with all of the different options for Kerberos and SSH. He suggests adoption of the GSSAPI key exchange mechanism in the IETF draft (which uses Kerberos to authenticate both parties to each other), in order to avoid man-in-the-middle attacks."
What's sad is that at first glance I thought draft-ietf-secsh-gsskeyex said goatsecx. It is quite a jumble of acronyms, isn't it though?
it would be funny if there was a goatse article on slashdot, and all the goatse trolls were on topic.
There are other parties interested in Kerberos?
Idol Star Astronomer
Crackability. Sounds like a word nabisco would use.
/bored
"Ritz.. now with more crackability."
-
ping -f 255.255.255.255 # if only
"draft-ietf-secsh-gsskeyex"
Yeah! Well, your mother!
..implementing draft-ietf-secsh-gsskeyex in addition to ..
Ahh yes. draft-ietf-secsh-gsskeyex.
Encryption so secure you need a key just to decipher the name!
:)
I welcome our new 99% overlords.
Since Kerberos was clearly developed with intent to run on the Unix platform, it is therefore a "derivative work" of Unix, and hence automatically becomes the Intellectual Property of SCO. You can be certain SCO is now *very* interested in the matter.