GSI-Enabled OpenSSH
GSI-OpenSSH is a modified version of OpenSSH that adds support for GSI authentication and credential forwarding (delegation), providing a single sign-on remote login and file transfer service. Both a GPT package and a standalone patch are available. The patch is built on the GSSAPI patch for OpenSSH by Simon Wilkinson, implementing RFC 4462, with GSI support originally added by Von Welch. We have submitted a patch for GSI support to the OpenSSH team.
The current version of GSI-OpenSSH also includes High Performance Networking (HPN) updates for OpenSSH from the Pittsburgh Supercomputing Center.
We make every effort to update the patch quickly upon release of a new version of OpenSSH. Under normal circumstances, we will have an updated patch available within one week. We post announcements of new releases and security advisories to the gsi-openssh-announce@globus.org mailing list. To subscribe, unsubscribe, or view the archives, visit the gsi-openssh-announce Info Page.
OpenSSH clients and servers typically support multiple authentication mechanisms. GSI-enabled OpenSSH adds GSI to the list of available authentication mechanisms for SSH protocol 2. Standard SSH authentication mechanisms supported by OpenSSH, excluding Kerberos, are not affected. To support both GSI and Kerberos, use OpenSSH with GSSAPI Mechglue instead.
A Java GSI-SSH client that is compatible with GSI-enabled OpenSSH is also available, and InterSoft's Secure NetTerm provides a compatible Windows GSI-SSH client.
Current Release: 5.1
Version 5.1 was released on Friday, March 26, 2010
and is included in
version 5.0.1 of the
Globus Toolkit
and
version 2.0.0 of the
Virtual Data Toolkit.
Documentation
- GSI-OpenSSH in the Globus Toolkit
- Download Page
- Installation Instructions
- Verification Instructions
- User's Guide
- Administrator's Guide
- Troubleshooting Common GSI-OpenSSH Issues
- Receiving GSI-OpenSSH Support
- Reference Manual
- Version History
- Privacy Policy
Sponsors
Financial support for the GSI-OpenSSH project has been provided by the National Science Foundation through NCSA, TeraGrid, and CILogon.
About this site
This website's design was inspired by and is a derivative work of gemal.dk. Permission has been granted to reuse elements of that site design here.