[COLUG] SSH AllowGroups / AllowUsers

[Scott Merrill]

On Wed, May 14, 2008 at 8:39 AM, Robert Foreman
<robert.foreman at gmail.com> wrote:
> I'm still curious, why did you disable GSSAPI Authentication?
>
> It seems to me that's one of the strengths and conveniences of
> Kerberos authentication.

According to this post:
http://blog.scottlowe.org/2006/09/08/ldap-based-access-control/
PAM-based access controls are incompatible with Kerberos single-sign-on for ssh.

I haven't tried any of the recommendations yet, but I am looking
forward to trying.  Thanks everyone for the pointers!

Cheers,
Scott