[OpenAFS] rhel4 - kerberos auth/credential forwarding working for openssh/pam

Douglas E. Engert deengert@anl.gov
Mon, 17 Sep 2007 08:54:32 -0500

Dave Botsch wrote:

> set GSSAPIDelegateCredentials to yes on the client side,

You can do this in the ssh_config or in a user's ~/.ssh/config.
For security reasons you only want to delegate to only hosts
you trust will not misuse the delegated credential, so use a
"Host" section in the ssh config file.


  Douglas E. Engert  <DEEngert@anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444