On Mon, 7 Mar 2011, Nico Kadel-Garcia wrote:
If this works, you've just solved a *BIG* problem for me: I'd been handed (ordered before I arrived on the site) the issues of getting Centrify OpenSSH to play nicely, and this avoids the "OpenSSH 5.x does not read .bashrc and read user aliases for remote ssh commands" problem I've been facing, while preserving the effective GSSAPI credentials handling.
Tested this with regular MIT kerberos under CentOS some time ago, but am actually running it against Active Directory currently.
*Good* admin. And are you coming to the Boston are, so I can buy you a decent local beer? (I'm not in London anymore.) Why aren't you over on the comp.security.ssh?
Too many groups, too little time. Tell you what, solve all the niggly little problems I've had with kerberised NFSv4 with CentOS5, and we'll call it quits.
jh