New Ticket     Tickets     Wiki     Browse Source     Timeline     Roadmap     Ticket Reports     Search

Ticket #14933 (closed defect: fixed)

Opened 5 years ago

Last modified 15 months ago

ssh (port:openssh) is not Kerberized

Reported by: shreevatsa.public@… Owned by: jwa@…
Priority: Normal Milestone:
Component: ports Version: 1.6.0
Keywords: Cc:
Port: openssh

Description

I have not investigated this, but the openssh installed by the port openssh (which git-core depends on, that's why I had it installed) does not use existing Kerberos tickets. I was wondering for a long time why my Kerberos had suddenly broken and I was having to type my password when ssh-ing each time. Using the Apple-provided /usr/bin/ssh instead, everything worked. I don't know what the fix is or how hard it is, maybe simply upgrading ssh (#14925) will fix it, maybe it's a config file setting, maybe a compile-time option...

Change History

comment:1 Changed 5 years ago by jmr@…

  • Owner changed from macports-tickets@… to wsiegrist@…

Assigning to maintainer.

comment:2 Changed 5 years ago by wsiegrist@…

  • Status changed from new to assigned

comment:3 Changed 5 years ago by tolsen@…

openssh from upstream is only partially kerberized (unlike openssh as you get from most vendors such as Apple or Debian). The fix is to apply the patch at http://www.sxw.org.uk/computing/patches/openssh.html This is a *very* common patch to apply to openssh. Please apply it so that I can have both git & kerberized ssh at the same time on my mac!

comment:4 Changed 5 years ago by wsiegrist@…

  • Owner changed from wsiegrist@… to macports-tickets@…
  • Status changed from assigned to new

Un-assigning due to dropping maintainership.

comment:5 Changed 4 years ago by anonymous

  • Milestone Port Bugs deleted

Milestone Port Bugs deleted

comment:6 Changed 3 years ago by jmr@…

  • Owner changed from macports-tickets@… to jwa@…
  • Port set to openssh

comment:7 Changed 3 years ago by shreevatsa.public@…

If the comment by tolsen from 2 years ago is right, then the fix is just to apply "a *very* common patch", and it's a mystery why this bug is still open. Anyway, I'm not using MacPorts anymore so I'm not affected by the bug anymore. :-)

comment:8 Changed 21 months ago by lassi.tuura@…

Not sure it's still of interest, but I think patches for this and some other apple-specific features like keychain integration are included in #27250 for openssh currently in macports (5.9p1).

comment:9 Changed 15 months ago by jwa@…

  • Status changed from new to closed
  • Resolution set to fixed

Probably (hopefully) done in r91536 as well as #27250

Note: See TracTickets for help on using tickets.