Re: SSH Kerberos packet exchange

[Markus Friedl <markus%openbsd.org@localhost>]

On Sun, Jul 10, 2005 at 03:48:54PM -0400, Karol Zielonko wrote:
> Thank you.
> 
> >Although, at one point, ssh.com did have their own Kerberos mechanism, 
> >named kerberos-2%ssh.com@localhost
> 
> Unfortunately the version of SSH that I'm working on, 3.2.0, uses
> the  kerberos-2%ssh.com@localhost variant. Anybody know if this one's packet
> exchange is documented anywhere?

http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/Attic/auth2-krb5.c?rev=1.2&content-type=text/x-cvsweb-markup

contains the old openssh code for this.  it got removed
because it's not really secure and is now replaced by
the GSSAPI variant.