Re: GSSAPI SSH WIN 2003

From: satya vadali (satyavadali_at_gmail.com)
Date: 08/02/05

  • Next message: Darren Dunham: "Re: Putty. Save settings to file(s) instead of registry?" 
    Date: 2 Aug 2005 08:06:35 -0700

    > Other option for me, restrict at service ticket level from Windows AD
    > 2003 level. I am not sure how and is it possible?

    > Say i have global group in AD called "my friends":
    > Add my friends to "my friends" group and only users in "my friends"
    > group will get Service ticket for my HP-UX box.

    Mean while I sent a mail to our Microsoft support and still waiting.
    Will update if .. its +ve

    And patch:
    May be this one ?!

    Auth selection
    http://www.sweb.cz/v_t_m/

     #LoginGraceTime 2m
     #PermitRootLogin yes
     #StrictModes yes
     #MaxAuthTries 6

    +#
    +# Auth selection
    +#
    +#HostbasedAuthAllowUsers
    +#HostbasedAuthDenyUsers
    +#PubkeyAuthAllowUsers
    +#PubkeyAuthDenyUsers
    +#KerberosAuthAllowUsers
    +#KerberosAuthDenyUsers
    +#KerberosOrLocalPasswdAllowUsers
    +#KerberosOrLocalPasswdDenyUsers
    +#PasswordAuthAllowUsers
    +#PasswordAuthDenyUsers
    +#ChallRespAuthAllowUsers [pam] user1 user2 ...
    +#ChallRespAuthDenyUsers [pam] user1 user2 ...
    +#ChallRespAuthAllowUsers [bsdauth] user1 user2 ...
    +#ChallRespAuthDenyUsers [bsdauth] user1 user2 ...
    +#ChallRespAuthAllowUsers [skey] user1 user2 ...
    +#ChallRespAuthDenyUsers [skey] user1 user2 ...
    +#ChallRespAuthAllowUsers [securid] user1 user2 ...
    +#ChallRespAuthDenyUsers [securid] user1 user2 ...
    +#GSSAPIAuthAllowUsers
    +#GSSAPIAuthDenyUsers
    +
     #RSAAuthentication yes
     #PubkeyAuthentication yes
     #AuthorizedKeysFile .ssh/authorized_keys

    thanks
    satya

  • Next message: Darren Dunham: "Re: Putty. Save settings to file(s) instead of registry?"
    • Quantcast