[openssh/private-master-vanilla: 8/13] don't clean up gssapi credentials by default (#1055016)

plautrba plautrba at fedoraproject.org
Wed Apr 9 13:46:45 UTC 2014


commit f3b39bb6cbe1401b0cee6f5fb8efc58ba75d9235
Author: Petr Lautrbach <plautrba at redhat.com>
Date:   Wed Feb 26 17:08:07 2014 +0100

    don't clean up gssapi credentials by default (#1055016)

 openssh-6.1p1-log-usepam-no.patch |    2 +-
 openssh-6.3p1-gsskex.patch        |    2 +-
 openssh-6.3p1-redhat.patch        |    2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)
---
diff --git a/openssh-6.1p1-log-usepam-no.patch b/openssh-6.1p1-log-usepam-no.patch
index 4ed52b1..64cec2c 100644
--- a/openssh-6.1p1-log-usepam-no.patch
+++ b/openssh-6.1p1-log-usepam-no.patch
@@ -15,7 +15,7 @@ diff -up openssh-6.1p1/sshd.c.log-usepam-no openssh-6.1p1/sshd.c
 diff -up openssh-6.1p1/sshd_config.log-usepam-no openssh-6.1p1/sshd_config
 --- openssh-6.1p1/sshd_config.log-usepam-no	2012-09-14 20:54:58.514255748 +0200
 +++ openssh-6.1p1/sshd_config	2012-09-14 20:54:58.551255954 +0200
-@@ -95,6 +95,8 @@ GSSAPICleanupCredentials yes
+@@ -95,6 +95,8 @@ GSSAPICleanupCredentials no
  # If you just want the PAM account and session checks to run without
  # PAM authentication, then enable this but set PasswordAuthentication
  # and ChallengeResponseAuthentication to 'no'.
diff --git a/openssh-6.3p1-gsskex.patch b/openssh-6.3p1-gsskex.patch
index eefd792..0c54d38 100644
--- a/openssh-6.3p1-gsskex.patch
+++ b/openssh-6.3p1-gsskex.patch
@@ -2892,7 +2892,7 @@ diff -up openssh-6.3p1/sshd_config.gsskex openssh-6.3p1/sshd_config
 @@ -92,6 +92,8 @@ ChallengeResponseAuthentication no
  GSSAPIAuthentication yes
  #GSSAPICleanupCredentials yes
- GSSAPICleanupCredentials yes
+ GSSAPICleanupCredentials no
 +#GSSAPIStrictAcceptorCheck yes
 +#GSSAPIKeyExchange no
  
diff --git a/openssh-6.3p1-redhat.patch b/openssh-6.3p1-redhat.patch
index d85244d..98df47d 100644
--- a/openssh-6.3p1-redhat.patch
+++ b/openssh-6.3p1-redhat.patch
@@ -96,7 +96,7 @@ diff -up openssh-6.3p1/sshd_config.redhat openssh-6.3p1/sshd_config
  #GSSAPIAuthentication no
 +GSSAPIAuthentication yes
  #GSSAPICleanupCredentials yes
-+GSSAPICleanupCredentials yes
++GSSAPICleanupCredentials no
  
  # Set this to 'yes' to enable PAM authentication, account processing, 
  # and session processing. If this is enabled, PAM authentication will 


More information about the scm-commits mailing list