1 files changed, 14 insertions, 0 deletions

diff --git a/debian/openssh-server.postinst b/debian/openssh-server.postinst
index bd14ba66e..2d7dbc9ea 100644
--- a/debian/openssh-server.postinst
+++ b/debian/openssh-server.postinst
@@ -72,6 +72,17 @@ set_config_option() {
 }
 
 
+remove_obsolete_gssapi() {
+        grep -qi '^[    ]*GSSAPINoMICAuthentication' /etc/ssh/sshd_config \
+                || return 0
+        perl -pe 's/^(\s*GSSAPINoMICAuthentication)/\#$1/i' \
+                < /etc/ssh/sshd_config > /etc/ssh/sshd_config.dpkg-new
+        chown --reference /etc/ssh/sshd_config /etc/ssh/sshd_config.dpkg-new
+        chmod --reference /etc/ssh/sshd_config /etc/ssh/sshd_config.dpkg-new
+        mv /etc/ssh/sshd_config.dpkg-new /etc/ssh/sshd_config
+}
+
+
 host_keys_required() {
         hostkeys="$(get_config_option HostKey)"
         if [ "$hostkeys" ]; then
@@ -190,6 +201,9 @@ create_sshdconfig() {
                     move_subsystem_sftp
                 fi
 
+                # Remove obsolete GSSAPI options.
+                remove_obsolete_gssapi
+
                 return 0
             fi
         fi