Opened 13 years ago

Closed 9 years ago

#14933 closed defect (fixed)

ssh (port:openssh) is not Kerberized

Reported by: shreevatsa.public@… Owned by: jyrkiwahlstedt
Priority: Normal Milestone:
Component: ports Version: 1.6.0
Keywords: Cc:
Port: openssh

Description

I have not investigated this, but the openssh installed by the port openssh (which git-core depends on, that's why I had it installed) does not use existing Kerberos tickets. I was wondering for a long time why my Kerberos had suddenly broken and I was having to type my password when ssh-ing each time. Using the Apple-provided /usr/bin/ssh instead, everything worked. I don't know what the fix is or how hard it is, maybe simply upgrading ssh (#14925) will fix it, maybe it's a config file setting, maybe a compile-time option...

Change History (9)

comment:1 Changed 13 years ago by jmroot (Joshua Root)

Owner: changed from macports-tickets@… to wsiegrist@…

Assigning to maintainer.

comment:2 Changed 13 years ago by wsiegrist@…

Status: newassigned

comment:3 Changed 12 years ago by tolsen (Tim Olsen)

openssh from upstream is only partially kerberized (unlike openssh as you get from most vendors such as Apple or Debian). The fix is to apply the patch at http://www.sxw.org.uk/computing/patches/openssh.html This is a *very* common patch to apply to openssh. Please apply it so that I can have both git & kerberized ssh at the same time on my mac!

comment:4 Changed 12 years ago by wsiegrist@…

Owner: changed from wsiegrist@… to macports-tickets@…
Status: assignednew

Un-assigning due to dropping maintainership.

comment:5 Changed 12 years ago by (none)

Milestone: Port Bugs

Milestone Port Bugs deleted

comment:6 Changed 10 years ago by jmroot (Joshua Root)

Owner: changed from macports-tickets@… to jwa@…
Port: openssh added

comment:7 Changed 10 years ago by shreevatsa.public@…

If the comment by tolsen from 2 years ago is right, then the fix is just to apply "a *very* common patch", and it's a mystery why this bug is still open. Anyway, I'm not using MacPorts anymore so I'm not affected by the bug anymore. :-)

comment:8 Changed 9 years ago by lassi.tuura@…

Not sure it's still of interest, but I think patches for this and some other apple-specific features like keychain integration are included in #27250 for openssh currently in macports (5.9p1).

comment:9 Changed 9 years ago by jyrkiwahlstedt

Resolution: fixed
Status: newclosed

Probably (hopefully) done in r91536 as well as #27250

Note: See TracTickets for help on using tickets.