Bug 1072

Summary:	AUTH selection (screen users based AUTH type)
Product:	Portable OpenSSH	Reporter:	Satya Vadali <satyavadali>
Component:	Kerberos support	Assignee:	Assigned to nobody <unassigned-bugs>
Status:	CLOSED FIXED
Severity:	enhancement	CC:	dtucker
Priority:	P2
Version:	4.1p1
Hardware:	All
OS:	All

Description Satya Vadali 2005-08-24 06:15:00 AEST

Is it possible to extend sshd_config for following options?

+# Auth selection 
+# 
+#KerberosAuthAllowUsers (groups)
+#KerberosAuthDenyUsers (groups)
+#GSSAPIAuthAllowUsers (groups)
+#GSSAPIAuthDenyUsers (groups)

I am looking at following patch.

Auth selection 
http://www.sweb.cz/v_t_m/ 

thanks
satya

Comment 1 Damien Miller 2005-08-27 01:10:06 AEST

*** Bug 1071 has been marked as a duplicate of this bug. ***

Comment 2 senthilkumar 2005-09-02 14:15:20 AEST

This functionality seems to be quite useful. Is there any chance that this 
functionality will get in to the main source tree.

Comment 3 Darren Tucker 2006-04-17 20:12:03 AEST

The "Match patch" (bug #1180) would provide a more general mechanism to allow this kind of thing (in addition to many others).  You could have this kind of configuration:

KerberosAuthentication no
Match group krbusers
    KerberosAuthentication yes

Comment 4 Darren Tucker 2007-05-20 17:48:30 AEST

The Match functionality in 4.6 and up now supports auth methods.

Comment 5 Damien Miller 2008-04-04 09:55:09 AEDT

Close resolved bugs after release.