From aba8bed94d06be683fb5b20d4075cbe12703ec88 Mon Sep 17 00:00:00 2001 From: Colin Watson Date: Wed, 14 Sep 2005 16:19:38 +0000 Subject: - Update commented-out Kerberos/GSSAPI options in default sshd_config. --- debian/changelog | 1 + debian/openssh-server.postinst | 12 ++++++------ 2 files changed, 7 insertions(+), 6 deletions(-) (limited to 'debian') diff --git a/debian/changelog b/debian/changelog index c3bad51c6..6c1422927 100644 --- a/debian/changelog +++ b/debian/changelog @@ -7,6 +7,7 @@ openssh (1:4.2p1-2) UNRELEASED; urgency=low Frost). - Build-depend on libkrb5-dev and configure --with-kerberos5=/usr. - openssh-client and openssh-server replace ssh-krb5. + - Update commented-out Kerberos/GSSAPI options in default sshd_config. -- Colin Watson Wed, 14 Sep 2005 15:48:57 +0100 diff --git a/debian/openssh-server.postinst b/debian/openssh-server.postinst index 3bff642a1..efd9cf484 100644 --- a/debian/openssh-server.postinst +++ b/debian/openssh-server.postinst @@ -251,15 +251,15 @@ ChallengeResponseAuthentication no # Change to no to disable tunnelled clear text passwords #PasswordAuthentication yes - -# To change Kerberos options +# Kerberos options #KerberosAuthentication no +#KerberosGetAFSToken no #KerberosOrLocalPasswd yes -#AFSTokenPassing no -#KerberosTicketCleanup no +#KerberosTicketCleanup yes -# Kerberos TGT Passing does only work with the AFS kaserver -#KerberosTgtPassing yes +# GSSAPI options +#GSSAPIAuthentication no +#GSSAPICleanupCredentials yes X11Forwarding yes X11DisplayOffset 10 -- cgit v1.2.3