Attachment 1412 Details for Bug 1416 – This patch is used in an AfterInstall phase to patch the source to enable GSSAPI by default.

[patch] This patch is used in an AfterInstall phase to patch the source to enable GSSAPI by default.

DVG-4853931_enable_GSSAPI_AfterInstall.patch (text/plain), 2.75 KB, created by Disco Vince Giffin on 2007-12-21 15:38:29 AEDT

(hide)

Description:

Filename:

MIME Type:

Creator: Disco Vince Giffin

Created: 2007-12-21 15:38:29 AEDT

Size: 2.75 KB

patch

obsolete

>diff -uNr ../PR-4853931~dst.orig/private/etc/ssh_config ./private/etc/ssh_config
>--- ../PR-4853931~dst.orig/private/etc/ssh_config	2006-12-05 21:41:13.000000000 -0800
>+++ ./private/etc/ssh_config	2006-12-05 23:14:53.000000000 -0800
>@@ -24,9 +24,9 @@
> #   RSAAuthentication yes
> #   PasswordAuthentication yes
> #   HostbasedAuthentication no
>-#   GSSAPIAuthentication no
>+#   GSSAPIAuthentication yes
> #   GSSAPIDelegateCredentials no
>-#   GSSAPIKeyExchange no
>+#   GSSAPIKeyExchange yes
> #   GSSAPITrustDNS no
> #   BatchMode no
> #   CheckHostIP yes
>diff -uNr ../PR-4853931~dst.orig/private/etc/sshd_config ./private/etc/sshd_config
>--- ../PR-4853931~dst.orig/private/etc/sshd_config	2006-12-05 21:41:13.000000000 -0800
>+++ ./private/etc/sshd_config	2006-12-05 23:15:11.000000000 -0800
>@@ -70,10 +70,10 @@
> #KerberosGetAFSToken no
> 
> # GSSAPI options
>-#GSSAPIAuthentication no
>+#GSSAPIAuthentication yes
> #GSSAPICleanupCredentials yes
> #GSSAPIStrictAcceptorCheck yes
>-#GSSAPIKeyExchange no
>+#GSSAPIKeyExchange yes
> 
> # Set this to 'yes' to enable PAM authentication, account processing, 
> # and session processing. If this is enabled, PAM authentication will 
>diff -uNr ../PR-4853931~dst.orig/usr/share/man/man5/ssh_config.5 ./usr/share/man/man5/ssh_config.5
>--- ../PR-4853931~dst.orig/usr/share/man/man5/ssh_config.5	2006-12-05 21:41:13.000000000 -0800
>+++ ./usr/share/man/man5/ssh_config.5	2006-12-05 23:12:59.000000000 -0800
>@@ -477,13 +477,13 @@
> .It Cm GSSAPIAuthentication
> Specifies whether user authentication based on GSSAPI is allowed.
> The default is
>-.Dq no .
>+.Dq yes .
> Note that this option applies to protocol version 2 only.
> .It Cm GSSAPIKeyExchange
> Specifies whether key exchange based on GSSAPI may be used. When using
> GSSAPI key exchange the server need not have a host key.
> The default is
>-.Dq no .
>+.Dq yes .
> Note that this option applies to protocol version 2 only.
> .It Cm GSSAPIDelegateCredentials
> Forward (delegate) credentials to the server.
>diff -uNr ../PR-4853931~dst.orig/usr/share/man/man5/sshd_config.5 ./usr/share/man/man5/sshd_config.5
>--- ../PR-4853931~dst.orig/usr/share/man/man5/sshd_config.5	2006-12-05 21:41:13.000000000 -0800
>+++ ./usr/share/man/man5/sshd_config.5	2006-12-05 23:13:24.000000000 -0800
>@@ -315,13 +315,13 @@
> .It Cm GSSAPIAuthentication
> Specifies whether user authentication based on GSSAPI is allowed.
> The default is
>-.Dq no .
>+.Dq yes .
> Note that this option applies to protocol version 2 only.
> .It Cm GSSAPIKeyExchange
> Specifies whether key exchange based on GSSAPI is allowed. GSSAPI key exchange 
> doesn't rely on ssh keys to verify host identity.
> The default is
>-.Dq no .
>+.Dq yes .
> Note that this option applies to protocol version 2 only.
> .It Cm GSSAPICleanupCredentials
> Specifies whether to automatically destroy the user's credentials cache

Actions: View | Diff

Attachments on bug 1416: 1411 | 1412