Avoid calling into Kerberos libraries from ssh_gssapi_server_mechanisms in the privsep monitor.

1 files changed, 1 insertions, 1 deletions

diff --git a/sshd.c b/sshd.c
index 8b793480e..027daa9d8 100644
--- a/sshd.c
+++ b/sshd.c
@@ -547,7 +547,7 @@ privsep_preauth_child(void)
 
 #ifdef GSSAPI
         /* Cache supported mechanism OIDs for later use */
-        if (options.gss_authentication)
+        if (options.gss_authentication || options.gss_keyex)
                 ssh_gssapi_prepare_supported_oids();
 #endif