OpenSSH vs SunSSH vs. SSH.com

Over the past few years we have been primarily using SSH.com's daemon on our Unix based servers. As we have greatly improved our account maintenance on campus, we have now gotten to the point where we can use a single sign-on via the PAM authentication against our ldap server. In addition, we have had a number of Solaris9 machines show up on campus with their variant of OpenSSH.

As we are looking at planning for the future, we have come to a question that I can not totally answer. Which SSH server works best for our needs. A few of our systems admins have decided that the pam support in the ssh.com daemon is lacking and have already ripped out our site licensed ssh.com daemon for OpenSSH variant. By doing so they have already garnered a bit of fury from me personally by breaking the DSA passphrase that I was using to gain access to certain accounts.

I have had mixed experience with all 3 daemons and am curious which was I should push our supported ssh server for campus at large.

Have you had experience in SunSSHd not being able to exchange keys with a SSH.com windows client? Have you had problems with the DSA passphrases not being used by OpenSSH server? Have you seen problems with pam support in any of the 3? Have you had problems with tunneling X connections with any of the 3?

Thanks for you help in allowing me to ask and answer some important questions concerning sshd.

Scott Received on Sat Mar 29 21:47:17 2003