>Number:         11997
>Category:       admin
>Synopsis:       Integrated Krb5 (Heimdal) and SSH
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    netbsd-admin
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Jan 18 21:42:00 PST 2001
>Closed-Date:
>Last-Modified:
>Originator:     Peter Losher
>Release:        v1.5.1_ALPHA
>Organization:
Nominum, Inc.
>Environment:
NetBSD falkland.nominum.com 1.5.1_ALPHA NetBSD 1.5.1_ALPHA (STANLEY) #0: Wed Dec  6 15:33:21 PST 2000     plosher@falkland.nominum.com:/falkland0/system/src/sys/arch/i386/compile/STANLEY i386
>Description:
Upgrading a group of servers from a earlier prerelease 1.5_ALPHA, I found that the integrated Heimdal Krb5 implementation breaks any update to OpenSSH or SSH Inc.'s version of SSH. (I have been using MIT's Kerberos' package) Our organization uses Krb5, so 

Is there a plan in place to either add Kerberos support to the SSH that comes with NetBSD or remove Heimdal Kerberos, so that it would be easier to install MIT Kerberos, and I can update SSH (and use ksu as well)

Thanks...
>How-To-Repeat:

>Fix:
Either patch OpenSSH that comes with NetBSD to use Heimdal, or gain the ability to remove the integrated Heimdal support so one can use MIT's Kerberos with SSH. (without hacking the Makefile for SSH to rearrange the lib includes to prevent conflicts JUST to get a SSH client, let alone sshd)
>Release-Note:
>Audit-Trail:
>Unformatted: