I have no control over the version of SSH we have to use. I am trying
to support a client whose Kerberized SSH servers are v1.5-1.2.26
(which is very bad) and have been hacked to communicate using GSS-
API. So, I am looking to see how I can come up with an SSH1 client
that talks GSS-API.


Ranga Samudrala



On Nov 2, 2007, at 5:04 PM, Nicolas Williams wrote:

> On Fri, Nov 02, 2007 at 04:42:56PM -0400, Ranga Samudrala wrote:
>> I am trying to develop a Java SSH client targeting a version of
>> Kerberised SSH1 server talking GSS-API. Does anybody know of anybody
>> else dealing with this scenario? Is there a place I can find SSH1
>> Java API that support communication using GSS-API?

>
> The "Kerberized SSHv1" that floated about some time back is really not
> something that you want to use. Besides being non-standard, there
> were
> issues with it (I don't recall the details). Also, it does not use
> the
> GSS-API, so you'd need a Java implementation of raw Kerberos. You
> could
> probably use the underlying raw Kerberos V implementation in JGSS, but
> you may have to hack on the [fortunately now open source] JDK.
>
> I urge you to upgrade to SSHv2.
>
> Nico
> --
>