[OpenAFS] kaserver vs. Kerberos IV

Derrick J Brashear shadow@dementia.org
Sun, 27 Oct 2002 11:36:45 -0500 (EST)


On 27 Oct 2002, Ian Delahorne wrote:

> > 
> > Actually, there ARE patches for kerberized SSH (I used them every day ;)
> 
> And it isn't on in v2 IIRC, for a reason (huge security holes is what
> I heard from the local OpenBSD/OpenSSH developers). Or maybe that was
> the token passing.

Give up (on the v4/AFS) stuff, use the GSS ssh patches, move along.

Yes, the token passing had bugs, but they were fixed. Sounds like FUD, but
I still don't recommend it, just the same.