Annotation of src/usr.bin/ssh/README.AFS-KERBEROS, Revision 1.1
1.1 ! deraadt 1:
! 2: ssh-1.2.26-afs-kerberos.patch-1
! 3: AFS, Kerberos v4 support for SSH
! 4:
! 5: Here are the extra flags to configure, and what they do:
! 6:
! 7: --with-krb4[=PATH] Compile in Kerberos v4 support:
! 8: Kerberos v4 authentication
! 9: Kerberos v4 password authentication
! 10: Kerberos v4 ~/.klogin authorization
! 11:
! 12: These are all enabled by the 'KerberosAuthentication' config option.
! 13: Kerberos v4 and Kerberos v5 support are mutually exclusive for now.
! 14: PATH default is /usr/kerberos.
! 15:
! 16: --with-hesiod[=PATH] Compile in support for Hesiod:
! 17: getpwnam(), getpwuid() replacements
! 18:
! 19: --with-afs Compile in AFS support (requires KTH krb4):
! 20: ticket/token passing
! 21: process authentication groups
! 22: local Xauthority files (for AFS home dirs)
! 23: /ticket TKT_ROOT directory (if it exists)
! 24:
! 25: Binaries built with AFS support will work just fine on non-AFS machines!
! 26: You will need to use the KTH krb4 libs (ftp://ftp.pdc.kth.se/pub/krb/src),
! 27: or just their libkafs, also available separately from CMU as libkrbafs
! 28: (http://andrew2.andrew.cmu.edu/dist/krbafs.html).
! 29:
! 30: Additional Kerberos client and server config options (and their defaults):
! 31:
! 32: KerberosAuthentication yes
! 33: KerberosOrLocalPasswd no
! 34: KerberosTgtPassing yes
! 35: AFSTokenPassing yes
! 36: KerberosTicketCleanup yes
! 37:
! 38: See sshd(8) and ssh(1) for details.
! 39:
! 40: The latest version of this patch can be found at
! 41:
! 42: http://www.monkey.org/~dugsong/ssh-afs-kerberos.html
! 43:
! 44: dugsong@monkey.org