[jira] [Commented] (SSHD-111) Support gssapi-with-mic authentication to use kerberos credentials

["Richard Evans (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SSHD-111?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13012888#comment-13012888 ] 

Richard Evans commented on SSHD-111:
------------------------------------

We'd like to use this feature in our embedding of sshd - we already support kerberos/gssapi authentication for the app itself.  Any chance of this patch getting added to the code?

Thanks

Richard

> Support gssapi-with-mic authentication to use kerberos credentials
> ------------------------------------------------------------------
>
>                 Key: SSHD-111
>                 URL: https://issues.apache.org/jira/browse/SSHD-111
>             Project: MINA SSHD
>          Issue Type: Improvement
>    Affects Versions: 0.5.0
>            Reporter: Richard Evans
>            Priority: Minor
>         Attachments: gss.patch
>
>
> I recently raised a couple of improvements which duplicated existing issues and which were fixed in HEAD.  Hope this one is not.
> I've made some changes to support gssapi-with-mic authentication allowing access to the server without entering a password if in a Kerberos environment.  This is beneficial for us because we embed sshd in an application which already provides single sign on using GSSAPI in Unix and Windows.
> A patch is attached.  The core of the code is in UserAuthGSS; the GSSAuthenticator class is provided to allow parts of the process to be overridden for different environments - for example using a native implemention of GSSManager on Windows to provide easy integration with AD.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira