Ticket #297 (closed defect: fixed)
debathena-ssh-server-config should turn off GSSAPIStrictAcceptorCheck
Reported by: | broder | Owned by: | |
---|---|---|---|
Priority: | low | Milestone: | |
Component: | -- | Keywords: | |
Cc: | Fixed in version: | ||
Upstream bug: |
Description
I have yet to hear a reason for why this is on by default other than to not change from the default-pre-patch behavior, except for a few fairly flimsy mutterings about trusting different principals different amounts (I'm skeptical).
I've never wanted this turned on, and a lot of servers I maintain end up needing it turned off.
Change History
Note: See
TracTickets for help on using
tickets.
Fixed in r23903 and uploaded to proposed. Barring objections, this will go to production Wednesday.