Hello,

I am looking to plan on rolling out OpenSSH with GSSAPI/Kerberos support
very soon. I just have some questions that I have currently unanswered
and I hope someone can assist me on this list in getting answers for.

Within the environment we currently have "roving users" which work from
home/on the road etc. These users are all running some variety of OSX or
Linux on their desktops. For them to be able to access the systems is
enabling GSSAPI authentication in their SSH enough or do they have to
have the full kerberos running on their systems?

We currently have systems which require staging to on the internal
network, Currently we have the ssh-agent running to allow the forwarding
of key based requests back to the remote desktop. Does this
functionality still work with GSSAPI or is there no longer a need to
have the agent running?

Regards,

Jimmy

[ reply ]