![[Shishi logo image of the Head of a GNU]](shishi.png)
This page contain information about Shishi, a free implementation of the Kerberos 5 network security system.
If you do not know what Kerberos 5 is, I suggest using the following resources.
Also see the page with related research papers that may be of interest.
The goals of this project are:
Shishi is licensed under the GPL, and the Shishi manual is licensed under the FDL.
Refer to the Shishi Manual web page for links to the manual in all formats; however, quick links to the most popular formats:
Shishi has received very little real-world testing and should be considered alpha quality. Basic support for acquiring and managing tickets are working, as well as serving requests in a Key Distribution Center daemon. DES, 3DES and AES cipher suites are supported. A PAM module for host security is included, as well as a Shishi port of a rsh/rlogin client.
A telnet client and server with Kerberos authentication is supported via GNU InetUtils. A SSH client and server with Kerberos authentication is supported via GSS and GSS-LSH. A IMAP server with Kerberos authentication (GSSAPI SASL mechanism) is supported via GNU MailUtils. A IMAP command line client with Kerberos authentication (GSSAPI SASL mechanism) is supported via GNU SASL, which also provide authentication (including Kerberos 5 via GSSAPI) via the SASL API for any application.
Shishi is developed for the GNU/Linux system, but runs on over 20 platforms including most major Unix platforms and Windows, and many kind of devices including iPAQ handhelds and S/390 mainframes.
Shishi uses libtasn1, which is included in the package, so you do not need to install it separately.
Shishi can optionally use GnuTLS (for OpenPGP and X.509 authentication), GNU Libidn (recommended for non-ASCII support), and GNU libgcrypt.
Note that new releases are only mentioned here if they introduce a major feature or is significant in some other way. Read the info-gnu mailing list if you seek more frequent announcements.
--enable-encryption --enable-authentication. It
includes telnet(d), rsh(d) and rlogin(d) with Shishi support.
A mailing list where Shishi users may help each other exists, and you can reach it by sending e-mail to help-shishi@gnu.org. Archives of the mailing list discussions, and an interface to manage subscriptions, is available through the World Wide Web at http://lists.gnu.org/mailman/listinfo/help-shishi.
If you are interested in paid support of Shishi, or sponsor the development, please contact me. If you provide paid services for Shishi, and would like to be mentioned here, also contact me.
The following organizations provide paid support for Shishi:
If you find GNU Shishi useful, please consider making a donation. No amount is too small!
The releases are distributed from ftp://alpha.gnu.org/pub/gnu/shishi/ and http://josefsson.org/shishi/releases/.
All official releases are signed with an OpenPGP key with fingerprint 0xB565716F.
Shishi is developed in CVS on a private machine. At irregular intervals, it is synchronized against a publicly available machine (just press enter at the password prompt):
$ cvs -d :pserver:anoncvs@yxa.extundo.com:/home/cvs/public-cvs login Logging in to :pserver:anoncvs@yxa.extundo.com:2401/home/cvs/public-cvs CVS password: $ cvs -d :pserver:anoncvs@yxa.extundo.com:/home/cvs/public-cvs co shishi
See the file README-alpha on how to bootstrap and build the package from CVS.
The online CVS repository is available, and there is also some CVS statistics.
A log of recent CVS activity is also available. If you prefer a mailing list, notifications of each CVS change is also sent to shishi-commit@gnu.org.
If you have trouble using CVS, you may download
a daily snapshot.
The snapshots are prepared similar to regular releases, i.e., you
simply build them using ./configure && make. There are
also daily Debian
packages built from the daily snapshot source code.
Before each release, the package is built on many platforms. The latest results from the autobuilder are available online.
Since Shishi is a library, there isn't much in the way of graphical user interfaces to show. However, the GNOME 2 port of Ticket Applet support Shishi, so we can at least show how it looks.
There is a snapshot release of Ticket Applet available from http://josefsson.org/shishi/releases/ticket-applet-shishi-*.tar.gz.
You can also browse the CVS of the Shishi port of Ticket Applet.
Return to GNU's home page.
Please send FSF & GNU inquiries & questions to gnu@gnu.org. There are also other ways to contact the FSF.
Please send comments on these web pages to webmasters@gnu.org, send other questions to gnu@gnu.org.
Copyright (C) 2001, 2003 Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA
Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
Updated: $Date: 2006/04/25 15:37:38 $ $Author: jas $