An updated version of my GSSAPI patches is now available for use with OpenSSH 3.4p1. This version also includes support for running with privsep enabled. The patches are available from http://www.sxw.org.uk/computing/patches/openssh.html These patches provide support for Kerberos and GSI authentication and credential passing with version 2 of the SSH protocol. They implement the protocol described in draft-ietf-secsh-gsskeyex-03, which is hopefully approaching WG last call! I'd be very grateful if anyone more familiar with the privsep code could review the GSSAPI monitor routines. Thanks to those who put time aside to test this code over the last week! Cheers, Simon.