Bug 488

Summary: Patch for kerberos in clusters
Product: Portable OpenSSH Reporter: Stephen J Smoogen <smoogen>
Component: Kerberos supportAssignee: OpenSSH Bugzilla mailing list <openssh-bugs>
Status: CLOSED WONTFIX    
Severity: enhancement    
Priority: P2    
Version: -current   
Hardware: All   
OS: Linux   
Attachments:
Description Flags
Patch for addressless kerberos tickets none

Description Stephen J Smoogen 2003-02-07 09:44:01 AEDT 
Patch from one of LANL's clustering groups. This allows for openssh to deal with
addressless tickets which seem to come up in areas with 1024+ nodes or so.
Comment 1 Stephen J Smoogen 2003-02-07 09:44:55 AEDT 
Created attachment 224 [details]
Patch for addressless kerberos tickets

From LANL cluster group. Should apply without GSSAPI
Comment 2 Darren Tucker 2003-11-20 00:25:09 AEDT 
krb5 has been replaced by gssapi, so is this still relevant?
Comment 3 Stephen J Smoogen 2003-11-20 07:03:30 AEDT 
I am not sure... I will make packages of the latest stable CVS and ask the
people who run clusters if it meets their needs with KRB5/4 removed completely.
Thankyou for following up/cleaning out old tickets.
Comment 4 Simon Wilkinson 2005-07-07 01:08:26 AEST 
All of the options setting code was pulled from auth-krb5.c, because without it
the settings in /etc/krb5.conf are used. You should be able to achieve the same
results as this patch by setting 'addressless' in the [libdefaults] section of
your /etc/krb5.conf

If you still believe OpenSSH needs a specific option for this behaviour, please
reopen this bug.

Thanks,

Simon.
Comment 5 Darren Tucker 2006-10-07 11:35:44 AEST 
Change all RESOLVED bug to CLOSED with the exception of the ones fixed post-4.4.