gssproxy

1 post

libssh 0.6.0rc2 and GSSAPI

We would like to announce libssh 0.6.0rc2 with full GSSAPI support. Last week Simo Sorce and I planned a day to test libssh against FreeIPA and gssproxy. The gss-proxy protocol allows proxying of GSSAPI initiation and authentication to have isolation and privilege separation for user-mode applications. Well we worked 3 days on libssh and gss-proxy and fixed several bugs in both components and added new options to libssh: GSSAPIServerIdentity, GSSAPIClientIdentity and GSSAPIDelegateCredentials. These options are also available in GSSAPI-enabled OpenSSH versions like in Fedora or RHEL. So thanks to Simo for help with our GSSAPI journey.

You can download libssh 0.6.0rc2 here.