[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#369511: marked as done (Add old gssapi authmethod to sshd)

Your message dated Mon, 8 Mar 2010 11:31:55 +0000
with message-id <20100308113155.GA22082@riva.ucam.org>
and subject line Re: Bug#369511: Add old gssapi authmethod to sshd
has caused the Debian Bug report #369511,
regarding Add old gssapi authmethod to sshd
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
369511: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369511
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: openssh-server
Version: 4.3p2-2
Severity: wishlist
Tags: patch

Hi

I've attached a patch that adds the old gssapi authmethod to
openssh-server. This is useful when using older clients that don't
support gssapi-with-mic as an authmethod. The original patch came from
here:
http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=107826289602763

As Debian's openssh already supports old gssapi in the client, I felt
it might be useful to include it in the server (though as a
configurable option, as you may not want this on by default).

Cheers
- Niall

Attachment: old-gssapi.diff
Description: Binary data


--- End Message ---
--- Begin Message --- 
tags 369511 wontfix
thanks

On Tue, May 30, 2006 at 10:54:31AM +0100, Niall Sheridan wrote:
> I've attached a patch that adds the old gssapi authmethod to
> openssh-server. This is useful when using older clients that don't
> support gssapi-with-mic as an authmethod. The original patch came from
> here:
> http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=107826289602763
>
> As Debian's openssh already supports old gssapi in the client, I felt
> it might be useful to include it in the server (though as a
> configurable option, as you may not want this on by default).

I'm sorry that we never got round to doing this at the time, which was
entirely my fault.  However, four years on, I don't think this would be
appropriate any more.  OpenSSH 3.8p1 is long dead and gone, and no
longer security-supported by Debian, and I just removed the client-side
support for this on the grounds that I would rather not maintain a patch
for a mechanism that the GSSAPI-patch upstream is unwilling to accept.
I think at this point it's best to declare this won't-fix and move on.

Sorry,

-- 
Colin Watson                                       [cjwatson@debian.org]

--- End Message ---
Reply to: