Patch from one of LANL's clustering groups. This allows for openssh to deal with addressless tickets which seem to come up in areas with 1024+ nodes or so.
Created attachment 224 [details] Patch for addressless kerberos tickets From LANL cluster group. Should apply without GSSAPI
krb5 has been replaced by gssapi, so is this still relevant?
I am not sure... I will make packages of the latest stable CVS and ask the people who run clusters if it meets their needs with KRB5/4 removed completely. Thankyou for following up/cleaning out old tickets.
All of the options setting code was pulled from auth-krb5.c, because without it the settings in /etc/krb5.conf are used. You should be able to achieve the same results as this patch by setting 'addressless' in the [libdefaults] section of your /etc/krb5.conf If you still believe OpenSSH needs a specific option for this behaviour, please reopen this bug. Thanks, Simon.
Change all RESOLVED bug to CLOSED with the exception of the ones fixed post-4.4.