Ticket #297 (closed defect: fixed)

Opened 15 years ago

Last modified 15 years ago

debathena-ssh-server-config should turn off GSSAPIStrictAcceptorCheck

Reported by: broder Owned by:
Priority: low Milestone:
Component: -- Keywords:
Cc: Fixed in version:
Upstream bug:


I have yet to hear a reason for why this is on by default other than to not change from the default-pre-patch behavior, except for a few fairly flimsy mutterings about trusting different principals different amounts (I'm skeptical).

I've never wanted this turned on, and a lot of servers I maintain end up needing it turned off.

Change History

comment:1 Changed 15 years ago by broder

  • Status changed from new to proposed

Fixed in r23903 and uploaded to proposed. Barring objections, this will go to production Wednesday.

comment:2 Changed 15 years ago by broder

  • Status changed from proposed to closed
  • Resolution set to fixed

Moved to production.

Note: See TracTickets for help on using tickets.