- stevesk@cvs.openbsd.org 2002/04/21 16:19:27

     [sshd.8 sshd_config]
     document default AFSTokenPassing no; ok deraadt@

3 files changed, 8 insertions, 6 deletions

diff --git a/ChangeLog b/ChangeLog
index 06cc0c2ff..86276bd6e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -12,6 +12,9 @@
    - markus@cvs.openbsd.org 2002/04/20 09:17:19
      [radix.c]
      rewrite using the buffer_* API, fixes overflow; ok deraadt@
+   - stevesk@cvs.openbsd.org 2002/04/21 16:19:27
+     [sshd.8 sshd_config]
+     document default AFSTokenPassing no; ok deraadt@
 
 20020421
  - (tim) [entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0).
@@ -8278,4 +8281,4 @@
  - Wrote replacements for strlcpy and mkdtemp
  - Released 1.0pre1
 
-$Id: ChangeLog,v 1.2065 2002/04/23 10:46:56 djm Exp $
+$Id: ChangeLog,v 1.2066 2002/04/23 10:51:15 djm Exp $
diff --git a/sshd.8 b/sshd.8
index 63ca7df22..59ba65f9c 100644
--- a/sshd.8
+++ b/sshd.8
@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: sshd.8,v 1.176 2002/04/05 20:56:21 stevesk Exp $
+.\" $OpenBSD: sshd.8,v 1.177 2002/04/21 16:19:27 stevesk Exp $
 .Dd September 25, 1999
 .Dt SSHD 8
 .Os
@@ -332,7 +332,7 @@ keywords are case-insensitive and arguments are case-sensitive):
 .It Cm AFSTokenPassing
 Specifies whether an AFS token may be forwarded to the server.
 Default is
-.Dq yes .
+.Dq no .
 .It Cm AllowGroups
 This keyword can be followed by a list of group name patterns, separated
 by spaces.
diff --git a/sshd_config b/sshd_config
index a3d8e9a63..a6b148bc9 100644
--- a/sshd_config
+++ b/sshd_config
@@ -1,4 +1,4 @@
-#       $OpenBSD: sshd_config,v 1.49 2002/03/21 20:51:12 markus Exp $
+#       $OpenBSD: sshd_config,v 1.50 2002/04/21 16:19:27 stevesk Exp $
 
 # This is the sshd server system-wide configuration file.  See sshd(8)
 # for more information.
@@ -65,8 +65,7 @@
 #KerberosOrLocalPasswd yes
 #KerberosTicketCleanup yes
 
-# AFSTokenPassing automatically enabled if k_hasafs() is true
-#AFSTokenPassing yes
+#AFSTokenPassing no
 
 # Kerberos TGT Passing only works with the AFS kaserver
 #KerberosTgtPassing no