Bug 1416 - Enable GSSAPI by default on Mac OS X
Summary: Enable GSSAPI by default on Mac OS X
Status: CLOSED WONTFIX
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: Kerberos support (show other bugs)
Version: 4.7p1
Hardware: Other Mac OS X
: P2 normal
Assignee: Assigned to nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-12-21 15:37 AEDT by Disco Vince Giffin
Modified: 2008-04-04 10:01 AEDT (History)
1 user (show)

See Also:


Attachments
Enables GSSAPI by default. (1.62 KB, patch)
2007-12-21 15:37 AEDT, Disco Vince Giffin
no flags Details | Diff
This patch is used in an AfterInstall phase to patch the source to enable GSSAPI by default. (2.75 KB, patch)
2007-12-21 15:38 AEDT, Disco Vince Giffin
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Disco Vince Giffin 2007-12-21 15:37:00 AEDT
Created attachment 1411 [details]
Enables GSSAPI by default.

Attached are two patches for building OpenSSH 4.7p1 on Mac OS X.

The attached patches enable GSSAPI by default on Mac OS X.
Comment 1 Disco Vince Giffin 2007-12-21 15:38:29 AEDT
Created attachment 1412 [details]
This patch is used in an AfterInstall phase to patch the source to enable GSSAPI by default.
Comment 2 Darren Tucker 2007-12-21 21:54:34 AEDT
Again, I don't think we want to change the defaults for everybody.

Why don't you just set your preferred values in ssh_config and sshd_config and not change the code?  This will have almost the same effect (ie it can be overridden by the command line or ~/.ssh/config).

Also, these patches are not against the main tree and will either not apply or break the build.
Comment 3 Disco Vince Giffin 2007-12-22 09:03:27 AEDT
(In reply to comment #2)
> Again, I don't think we want to change the defaults for everybody.

Seems reasonable.

> Why don't you just set your preferred values in ssh_config and
> sshd_config and not change the code? 

We'd like to keep the distinction (of 'default' versus changed in the config file) for the user.  I've found that this can help admins debug situations that otherwise result in erroneous assumptions and/or erroneous bugs being filed (or legit bugs not being filed).

> Also, these patches are not against the main tree and will either not
> apply or break the build.

Ok. Sorry about that.
Comment 4 Damien Miller 2008-04-04 10:01:57 AEDT
Close resolved bugs after release.