GSI-Enabled OpenSSH
GSI-OpenSSH is a modified version of OpenSSH that adds support for GSI authentication and credential forwarding (delegation), providing a single sign-on remote login and file transfer service. RPMS, GPT packages, and a standalone patch are available. The patch is built on the GSSAPI patch for OpenSSH by Simon Wilkinson, implementing RFC 4462, with GSI support originally added by Von Welch. We have submitted a patch for GSI support to the OpenSSH team.
The current version of GSI-OpenSSH also includes High Performance Networking (HPN) updates for OpenSSH from the Pittsburgh Supercomputing Center.
We make every effort to update the patch quickly upon release of a new version of OpenSSH. Under normal circumstances, we will have an updated patch available within one week. We post announcements of new releases and security advisories to the gsi-openssh-announce@globus.org mailing list. To subscribe, unsubscribe, or view the archives, visit the gsi-openssh-announce Info Page.
OpenSSH clients and servers typically support multiple authentication mechanisms. GSI-enabled OpenSSH adds GSI to the list of available authentication mechanisms for SSH protocol 2. Standard SSH authentication mechanisms supported by OpenSSH, excluding Kerberos, are not affected. To support both GSI and Kerberos, use OpenSSH with GSSAPI Mechglue instead.
A Java GSI-SSH client that is compatible with GSI-enabled OpenSSH is also available, and InterSoft's Secure NetTerm provides a compatible Windows GSI-SSH client.
RPMs
GSI-OpenSSH RPMs are available in EPEL and Fedora:
$ yum search gsi-openssh
============================= Matched: gsi-openssh =============================
gsi-openssh.x86_64 : An implementation of the SSH protocol with GSI
: authentication
gsi-openssh-clients.x86_64 : SSH client applications with GSI
authentication
gsi-openssh-server.x86_64 : SSH server daemon with GSI authentication
Current Release: 5.6
Version 5.6 was released on Tuesday, April 2, 2013
and is available from the
GSI-OpenSSH download page.
Version 5.5 was released on Monday, May 28, 2012
and is included in
version 5.2.4 of the
Globus Toolkit.
Documentation
- GSI-OpenSSH in the Globus Toolkit
- Download Page
- Installation Instructions
- Verification Instructions
- User's Guide
- Administrator's Guide
- Troubleshooting Common GSI-OpenSSH Issues
- Receiving GSI-OpenSSH Support
- Reference Manual
- Version History
- Privacy Policy
Sponsors
Financial support for the GSI-OpenSSH project has been provided by the National Science Foundation through NCSA, TeraGrid, and CILogon.
About this site
This website's design was inspired by and is a derivative work of gemal.dk. Permission has been granted to reuse elements of that site design here.