Bug 1072 - AUTH selection (screen users based AUTH type)
Summary: AUTH selection (screen users based AUTH type)
Status: CLOSED FIXED
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: Kerberos support (show other bugs)
Version: 4.1p1
Hardware: All All
: P2 enhancement
Assignee: Assigned to nobody
URL:
Keywords:
: 1071 (view as bug list)
Depends on:
Blocks:
 
Reported: 2005-08-24 06:15 AEST by Satya Vadali
Modified: 2008-04-04 09:55 AEDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Satya Vadali 2005-08-24 06:15:00 AEST 
Is it possible to extend sshd_config for following options?

+# Auth selection 
+# 
+#KerberosAuthAllowUsers (groups)
+#KerberosAuthDenyUsers (groups)
+#GSSAPIAuthAllowUsers (groups)
+#GSSAPIAuthDenyUsers (groups)

I am looking at following patch.

Auth selection 
http://www.sweb.cz/v_t_m/ 

thanks
satya
Comment 1 Damien Miller 2005-08-27 01:10:06 AEST 
*** Bug 1071 has been marked as a duplicate of this bug. ***
Comment 2 senthilkumar 2005-09-02 14:15:20 AEST 
This functionality seems to be quite useful. Is there any chance that this 
functionality will get in to the main source tree.
Comment 3 Darren Tucker 2006-04-17 20:12:03 AEST 
The "Match patch" (bug #1180) would provide a more general mechanism to allow this kind of thing (in addition to many others).  You could have this kind of configuration:

KerberosAuthentication no
Match group krbusers
    KerberosAuthentication yes
Comment 4 Darren Tucker 2007-05-20 17:48:30 AEST 
The Match functionality in 4.6 and up now supports auth methods.
Comment 5 Damien Miller 2008-04-04 09:55:09 AEDT 
Close resolved bugs after release.