Antonio Larrosa
45f6d17800
package existed for a brief period of time during SLE 15 SP6/
Leap 15.6 development but even if it was removed from the
repositories before GM, some users might have it in their
systems from having tried a beta/RC release (boo#1227350).
quoting was present in the user-supplied ssh_config(5) directive
(bsc#1218215, CVE-2023-51385).
OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=270
19 lines
528 B
Plaintext
19 lines
528 B
Plaintext
This version of the Kerbros/GSSAPI support avoids DNS lookups
|
|
for Kerberos-related names. These DNS lookups were problematic
|
|
for dialup users because they would lead to excessive delays
|
|
if DNS was not reachable.
|
|
|
|
If you do use Kerberos, please make sure you edit the server and
|
|
client configuration files as follows:
|
|
|
|
/etc/ssh/sshd_config:
|
|
|
|
GSSAPIAuthentication yes
|
|
GSSAPICleanupCredentials yes
|
|
|
|
/etc/ssh/ssh_config:
|
|
Host *
|
|
... lots of other options ...
|
|
GSSAPIAuthentication yes
|
|
GSSAPIDelegateCredentials yes
|