Secure Shell and Kerberos

[charlie_bulosan]

Hi All,


We are currently using Secure Shell for external transactions such as sftp. We have not really implemented Secure Shell for internal use.

The Secure Shell configuration is we are acting only as a ssh client. I think they're using Host-Based Authentication.

We are planning to implement ssh on all our unix servers initially. And then integrate it with Kerberos for better security and single sign on.

My queries are :
1) Is it possible to implement ssh on all the unix servers for all their users in it, using Public-Key authentication, and bypass the current (in production) ssh configuration for a certain ordinary user?
2) What are your comments on using Secure Shell and Kerberos Authentication?


Many Thanks,
Charlie

[Peter Godron]

Charlie,
The following threads should get you started:
https://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=980805
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1076369

You probably already have a copy, but anyway:
http://docs.hp.com/en/T1471-90014/index.html

[Peter Godron]

Hi,
could you please update the thread. How are you getting on ? Were my suggestions of any use ?

If the problem is resolved, could you please complete the thread by awarding points to helpful answers and summarising the solution for you.
This will help resolution of similar problems in the future.

[charlie_bulosan]

Hi Peter,

Thanks for the links provided as they are quite helpful.

I've asked HP about item 1 and they said it is possible to bypass the current ssh config of the user. The user is using Host Based authentication.

Many Thanks,
Charlie