GSI-Enabled OpenSSH
GSI-OpenSSH is a modified version of OpenSSH that adds support for GSI authentication and credential forwarding (delegation), providing a single sign-on remote login and file transfer service. Both a GPT package and a standalone patch are available. The patch is built on the GSSAPI patch for OpenSSH by Simon Wilkinson, implementing RFC 4462, with GSI support originally added by Von Welch. We have submitted a patch for GSI support to the OpenSSH team.
The current version of GSI-OpenSSH also includes High Performance Networking (HPN) updates for OpenSSH from the Pittsburgh Supercomputing Center.
We make every effort to update the patch quickly upon release of a new version of OpenSSH. Under normal circumstances, we will have an updated patch available within one week. We post announcements of new releases and security advisories to the gsi-openssh-announce@globus.org mailing list. To subscribe, send email to majordomo@globus.org with "subscribe gsi-openssh-announce <your email address>" in the body. The list is archived online here.
OpenSSH clients and servers typically support multiple authentication mechanisms. GSI-enabled OpenSSH adds GSI to the list of available authentication mechanisms for SSH protocol 2. Standard SSH authentication mechanisms supported by OpenSSH, excluding Kerberos, are not affected. To support both GSI and Kerberos, use OpenSSH with GSSAPI Mechglue instead.
A Java GSI-SSH client that is compatible with GSI-enabled OpenSSH is also available, and InterSoft's Secure NetTerm provides a compatible Windows GSI-SSH client.
Current Release: 4.3
Version 4.3 was released on Thursday, April 3, 2008
and is available from the
GSI-OpenSSH download page.
Version 4.2 was released on Thursday, January 10, 2008
and is included in
version 4.0.7 of the
Globus Toolkit.
Documentation
- GSI-OpenSSH in the Globus Toolkit
- Download Page
- Installation Instructions
- Verification Instructions
- User's Guide
- Administrator's Guide
- Troubleshooting Common GSI-OpenSSH Issues
- Receiving GSI-OpenSSH Support
- Version History
Sponsors
Financial support for the GSI-OpenSSH project was provided by the National Science Foundation through NCSA and TeraGrid.
About this site
This website's design was inspired by and is a derivative work of gemal.dk. Permission has been granted to reuse elements of that site design here.