Mailing List Archive

[Bug 944] ssh_config missing default configuration values for GSSAPI
http://bugzilla.mindrot.org/show_bug.cgi?id=944

Summary: ssh_config missing default configuration values for
GSSAPI
Product: Portable OpenSSH
Version: 3.9p1
Platform: All
OS/Version: Linux
Status: NEW
Severity: enhancement
Priority: P2
Component: ssh
AssignedTo: openssh-bugs@mindrot.org
ReportedBy: adam.bernstein@css-security.com


ssh_config does not contain default values for the configurable GSSAPI options,
as are found in sshd_config. These entries are self-documenting comments that
assist the installer properly configure the software. In the absence of any
documentation for how to configure GSSAPI in SSH, these comment tags in
ssh_config and sshd_config are essential for success.

One critical addition to ssh_config would be the following:

#GSSAPIAuthentication no
#GSSAPIDelegateCredentials no

From a deeper inspection of readconf.c, it appears the ssh_config file has not
been maintained, and these informative default values do not appear for many
other configurable parameters. Although my primary interest is GSSAPI, anyone
spending time to fix this issue should add all missing configurable tags to
ssh_config.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 944] ssh_config missing default configuration values for GSSAPI [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=944





------- Additional Comments From dtucker@zip.com.au 2004-10-26 12:43 -------
> In the absence of any documentation for how to configure GSSAPI

Huh? At the top of the ssh_config file it refers to the ssh_config(5) man page,
which says, in part:

GSSAPIAuthentication
Specifies whether user authentication based on GSSAPI is allowed.
The default is ``no''. Note that this option applies to protocol
version 2 only.

GSSAPIDelegateCredentials
Forward (delegate) credentials to the server. The default is
``no''. Note that this option applies to protocol version 2 only.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.