- Update commented-out Kerberos/GSSAPI options in default sshd_config.

2 files changed, 7 insertions, 6 deletions

diff --git a/debian/changelog b/debian/changelog
index c3bad51c6..6c1422927 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -7,6 +7,7 @@ openssh (1:4.2p1-2) UNRELEASED; urgency=low
       Frost).
     - Build-depend on libkrb5-dev and configure --with-kerberos5=/usr.
     - openssh-client and openssh-server replace ssh-krb5.
+    - Update commented-out Kerberos/GSSAPI options in default sshd_config.
 
  -- Colin Watson <cjwatson@debian.org>  Wed, 14 Sep 2005 15:48:57 +0100
 
diff --git a/debian/openssh-server.postinst b/debian/openssh-server.postinst
index 3bff642a1..efd9cf484 100644
--- a/debian/openssh-server.postinst
+++ b/debian/openssh-server.postinst
@@ -251,15 +251,15 @@ ChallengeResponseAuthentication no
 # Change to no to disable tunnelled clear text passwords
 #PasswordAuthentication yes
 
-
-# To change Kerberos options
+# Kerberos options
 #KerberosAuthentication no
+#KerberosGetAFSToken no
 #KerberosOrLocalPasswd yes
-#AFSTokenPassing no
-#KerberosTicketCleanup no
+#KerberosTicketCleanup yes
 
-# Kerberos TGT Passing does only work with the AFS kaserver
-#KerberosTgtPassing yes
+# GSSAPI options
+#GSSAPIAuthentication no
+#GSSAPICleanupCredentials yes
 
 X11Forwarding yes
 X11DisplayOffset 10