search for: gsskex

On Tue, Apr 02, 2024 at 01:30:11AM +0100, Colin Watson wrote: > * for Debian trixie (current testing): > > * add dependency-only packages called something like > openssh-client-gsskex and openssh-server-gsskex, depending on their > non-gsskex alternatives > * add NEWS.Debian entry saying that people need to install these > packages if they want to retain GSS-API key exchange support This is now implemented in Debian unstable. I called the packages openssh...

...ransition. We've had it for nearly 20 years now, so we can take the time to do a proper job that at least tries not to leave users in the lurch. How does this rough plan sound? * for Debian trixie (current testing): * add dependency-only packages called something like openssh-client-gsskex and openssh-server-gsskex, depending on their non-gsskex alternatives * add NEWS.Debian entry saying that people need to install these packages if they want to retain GSS-API key exchange support * add release note saying the same * for Debian trixie+1 (or maybe after the next Ubu...

...I think this was answered last year in this thread: https://lists.mindrot.org/pipermail/openssh-unix-dev/2022-May/040285.html and unfortunately it seems there won't be any merging of the GSSAPI patch. :-( There's: https://github.com/gss-openssh/openssh-portable https://github.com/openssh-gsskex/openssh-gsskex but both look dead. -- You are receiving this mail because: You are the assignee for the bug. You are watching someone on the CC list of the bug.

...#39;t be one). This will mean that when trying to interoperate with other implementations (if there are any :-) you'll get a message about the MIC not being correct. This will be fixed in my forthcoming patch to 2.9p1 (which will probably break compatibility with 2.5px clients/servers using gsskex) Sorry! Simon. -- Simon Wilkinson <simon at sxw.org.uk> http://www.sxw.org.uk "I've seen honest faces before. They usually come attached to liars."

...ostname resolution fails. DVG-5142987_launchd_DISPLAY_for_X11.patch Fixes issue with X11 forwarding on Mac OS X. DVG-5258734_pty_permission_fix.patch & sshpty.c.patch Fixes PTY handling on Mac OS X. bsm.patch Part of BSM support. lastlog.patch Fixes lastlog on Mac OS X. openssh-4.4p1-gsskex-20061002.patch Kerberos GSS Key Exchange support. sacl.patch Service ACL support. - Disco Vince Giffin OS Security Engineer Apple Inc.

https://bugzilla.mindrot.org/show_bug.cgi?id=3203 Bug ID: 3203 Summary: Could default_ccache_name from krb5.conf be used for GSSAPI connections? Product: Portable OpenSSH Version: 8.3p1 Hardware: ix86 OS: Linux Status: NEW Severity: enhancement Priority: P5