[OpenAFS] New OpenSSH-3.7p1 removes AFS support

Erik Arneson erik@aarg.net
Tue, 16 Sep 2003 11:34:01 -0700


--=-=-=
Content-Transfer-Encoding: quoted-printable

On 16-Sep-2003, J Maynard Gelinas <gelinas@lns.mit.edu> wrote:
>   This may be slightly off-topic for the OpenAFS list, but the latest
> OpenSSH-3.7p1 removes support for AFS, writing Kerberos 5 tickets to files
> (in memory now), and Kerberos 4. Since an exploit for all previous OpenSSH
> releases has just been announced, I'm somewhat confused about how to
> handle this mess. Can anyone suggest a solution for remote logins which
> supports SSH protocols 1 & 2, AFS and Kerberos, and builds properly on
> Redhat Linux 7.x?

The patch at <http://www.openssh.com/txt/buffer.adv> applies cleanly to
3.4p1, and should build nicely on RH 7.x.

=2D-=20
;; Erik Arneson <erik@aarg.net>    AARG Net <http://www.aarg.net/> ;;
;; GPG Key ID: 2048R/8B4CBC9C           <http://erik.arneson.org/> ;;
;; "Civilization is only savagery silver-gilt." - H. Rider Haggard ;;

--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iQEVAwUAP2dXndtvZZqLTLycAQKETAf9EJne/ktI901XrXk7WUz4i5elZhw0f5Sv
zkzdObDi6gwLQz0vbCAMcxpsjbViPcoyKzIKpafsunmgvOfvv3KW7y/X4jtlAu2U
rg/99Ddcze8gY87Ikb1lrqncLQXrmql+V6m10imQeYfBcAd2zg/YawONMHnMJlK0
gtafpUS+92ElQuqr5YfjUoo39rMNI3JwrQJBr2f+07NNQy/0J8FTdr4i1JfJ+YG9
uyxId2zcEBiqKGMu+GtGFmNRKzw9TdUDqV3ezXohowr4hGIwY2km+5b+osJapGaF
lzNIhehLKWLFpsksc0+JNypf/PXEThEL+sLIdPDsV88zmvkkg6ZE6g==
=cPOm
-----END PGP SIGNATURE-----
--=-=-=--