Subject: Re: heimdal kstash
To: None <collver@linuxfreemail.com>
From: David S. <davids@idiom.com>
List: netbsd-help
Date: 04/13/2002 16:17:09
> 
> It would be nice if Kerberos 5 was integrated into xdm and openssh.

I've integrated Kerberos V into xdm.  See

	ftp://idiom.com/users/davids/xdm.3.3.6-krb5.tar.bz2
	ftp://idiom.com/users/davids/xdm.4.1.0-krb5.tar.bz2

I haven't gotten around to xdm from XFree86 4.2 yet.  The lastest 
openssh does have Kerberos V support, but I'm not sure how to make 
it work without PAM.  Another thing I've been meaning to get to ...

> 
> I also learned that Kerberos is authentication only.  To fully replace
> NIS, I could pair Kerberos with LDAP if I had something like pam_ldap or
> nss_ldap.

You could use Kerberos for authentication, and YP without passwords for
the rest.

David S.

>