Re: SSH Kerberos packet exchange

[sxw%inf.ed.ac.uk@localhost]

On Sat, 9 Jul 2005, Karol Zielonko wrote:

> I am trying to get the Kerberos authentication code working in our VMS port of
> SSH. (It is based on SSH Comm. Inc's version 3.2.0). I know next to nothing
> about Kerberos (and only slightly more about ssh ;^). I'm looking for a draft
> or RFC that specifies the packet exchange over SSH that implements Kerberos
> authentication. Can anyone point me in the right direction?

http://www.ietf.org/internet-drafts/draft-ietf-secsh-gsskeyex-09.txt

Although, at one point, ssh.com did have their own Kerberos mechanism, 
named kerberos-2%ssh.com@localhost. I'm not sure whether they still use this, or 
now use the GSSAPI mechansism described above. kerberos-2 was never 
standardised, and I'm not sure if its documented anywhere.

Cheers,

Simon.