[rhn-users] sshd and kerberos 5

[FM]

Thanks,
I read that when using kerberos + pam the username/password is paass 
though the network in clear text.




Preston, Gabriel wrote:

>We use Kerberos5 in our environment.  To get it to work, we modified our
>/etc/pam.d/sshd file instead of enabling Kerberos5 in the sshd config file.
>This is what our /etc/pam.d/sshd file looks like:
>
>auth       sufficient   pam_stack.so service=system-auth
>auth       required     pam_nologin.so
>auth       required     pam_krb5.so use_first_pass
>account    required     pam_stack.so service=system-auth
>password   required     pam_stack.so service=system-auth
>session    required     pam_stack.so service=system-auth
>session    required     pam_limits.so
>session    optional     pam_console.so
>
>-gabriel
>
>-----Original Message-----
>From: rhn-users-bounces at redhat.com
>[mailto:rhn-users-bounces at redhat.com]On Behalf Of Daniel Wittenberg
>Sent: Tuesday, November 30, 2004 6:54 PM
>To: Red Hat Network Users List
>Subject: Re: [rhn-users] sshd and kerberos 5
>
>
>Did you configure /etc/krb5.conf for your environment?  If you just want
>to login using your krb password probably easier to configure pam
>in /etc/pam.d/sshd to use the pam_krb.
>
>Dan
>
>On Tue, 2004-11-30 at 18:49 -0500, FM wrote:
>  
>
>>RHEL 3
>>Is it possible to use use kerberos 5 (sasl ? ) with sshd ?
>>
>>I enable the kerberos in the sshd_config
>>but it denied my kerberos password
>>
>>thanks
>>
>>_______________________________________________
>>rhn-users mailing list
>>rhn-users at redhat.com
>>https://www.redhat.com/mailman/listinfo/rhn-users
>>    
>>
>
>_______________________________________________
>rhn-users mailing list
>rhn-users at redhat.com
>https://www.redhat.com/mailman/listinfo/rhn-users
>
>_______________________________________________
>rhn-users mailing list
>rhn-users at redhat.com
>https://www.redhat.com/mailman/listinfo/rhn-users
>  
>