openssh bugs - Oct 2004 - [Bug 944] ssh_config missing default configuration values for GSSAPI

http://bugzilla.mindrot.org/show_bug.cgi?id=944

           Summary: ssh_config missing default configuration values for
                    GSSAPI
           Product: Portable OpenSSH
           Version: 3.9p1
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: ssh
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: adam.bernstein at css-security.com


ssh_config does not contain default values for the configurable GSSAPI options,
as are found in sshd_config.  These entries are self-documenting comments that
assist the installer properly configure the software.  In the absence of any
documentation for how to configure GSSAPI in SSH, these comment tags in
ssh_config and sshd_config are essential for success.

One critical addition to ssh_config would be the following:

#GSSAPIAuthentication no
#GSSAPIDelegateCredentials no
>From a deeper inspection of readconf.c, it appears the ssh_config file has
not
been maintained, and these informative default values do not appear for many
other configurable parameters.  Although my primary interest is GSSAPI, anyone
spending time to fix this issue should add all missing configurable tags to
ssh_config.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=944





------- Additional Comments From dtucker at zip.com.au  2004-10-26 12:43
-------
> In the absence of any documentation for how to configure GSSAPI
Huh?  At the top of the ssh_config file it refers to the ssh_config(5) man page,
which says, in part:

  GSSAPIAuthentication
      Specifies whether user authentication based on GSSAPI is allowed.
      The default is ``no''.  Note that this option applies to protocol
      version 2 only.

  GSSAPIDelegateCredentials
      Forward (delegate) credentials to the server.  The default is
      ``no''.  Note that this option applies to protocol version 2 only.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.