pkgsrc/security/openssh+gssapi/MESSAGE
jwise 98496d7188 Import package for openssh+gssapi, which is openssh-3.6.1p2 with version
20030430 of the GSSAPI patches from

	http://www.sxw.org.uk/computing/patches/openssh.html

.  From the site:

  The patches on this page are concerned with adding support for
  authenticating users via their Kerberos credentials, and allowing
  authenticated users to forward their credentials to a remote
  machine over ssh.

  These patches are against various versions of the OpenSSH portable
  code. SSH has both a legacy protocol version 1, and a newer,
  protocol version 2 (which is being standardised in the IETF).
  Techniques exist for performing Kerberos authentication over both
  protocols, and GSSAPI authentication over protocol version 2.

In this package standard ssh support for kerberos versions 4 and 5 is kept
for version 1 of the ssh protocol (openssh does not support kerberos 4 in
ssh protocol version 2).

These patches, which provide a much more thorough implementation of kerberos
5 support than that shipped with openssh, are pkg'ed here with an eye toward
evaluation of their usefullness for inclusion in the base os.
2003-07-24 21:01:23 +00:00

17 lines
700 B
Text

===========================================================================
$NetBSD: MESSAGE,v 1.1.1.1 2003/07/24 21:01:23 jwise Exp $
*===* NOTICE *===*
If you have existing config files for OpenSSH located at /etc/ssh.conf
and /etc/sshd.conf, then you will have to copy them:
/etc/ssh.conf --> ${PKG_SYSCONFDIR}/ssh_config
/etc/sshd.conf --> ${PKG_SYSCONFDIR}/sshd_config
The `${OPENSSH_USER}' user and `${OPENSSH_GROUP}' group used for
privilege separation have been created if they did not already exist.
For security reasons, UsePrivilegeSeparation has to be yes
(the default value).
===========================================================================