* Add remaining pieces of Kerberos support (closes: #275472):

  - Add GSSAPI key exchange support from
    http://www.sxw.org.uk/computing/patches/openssh.html (thanks, Stephen
    Frost).

1 files changed, 21 insertions, 0 deletions

diff --git a/monitor_wrap.c b/monitor_wrap.c
index d8814682a..63d158b67 100644
--- a/monitor_wrap.c
+++ b/monitor_wrap.c
@@ -1217,4 +1217,25 @@ mm_ssh_gssapi_userok(char *user)
         debug3("%s: user %sauthenticated",__func__, authenticated ? "" : "not ");
         return (authenticated);
 }
+
+OM_uint32
+mm_ssh_gssapi_sign(Gssctxt *ctx, gss_buffer_desc *data, gss_buffer_desc *hash)
+{
+        Buffer m;
+        OM_uint32 major;
+
+        buffer_init(&m);
+        buffer_put_string(&m, data->value, data->length);
+
+        mm_request_send(pmonitor->m_recvfd, MONITOR_REQ_GSSSIGN, &m);
+        mm_request_receive_expect(pmonitor->m_recvfd, MONITOR_ANS_GSSSIGN, &m);
+
+        major = buffer_get_int(&m);
+        hash->value = buffer_get_string(&m, &hash->length);
+
+        buffer_free(&m);
+
+        return(major);
+}
+
 #endif /* GSSAPI */