Moonshot-ssh performs EAP authentication between the client and the server.
Using pam_gss with password-based authentication sends the cleartext password to the server and performs the EAP authentication there.
The former is preferable, because it's secure; the latter should only be used for interactive logon and legacy (non-GSS) application support.
-- Luke
|