search for: gssapirequiredauthind

...specified either on the KDC side (you will not be granted a ticket for SSH service) or on the side of service (as implemented here). The authentication indicators are exposed to the service as a named attributes and therefore simply accessible. This change also implements new configuration option GSSAPIRequiredAuthIndicators which allows to specify space separated list of indicators that are eligible to access this service. [1] https://k5wiki.kerberos.org/wiki/Projects/Authentication_indicator -- You are receiving this mail because: You are watching the assignee of the bug.