diff options
| author |   djm <djm@openbsd.org> | 2017-01-06 03:45:41 +0000 |
|---|---|---|
| committer | djm <djm@openbsd.org> | 2017-01-06 03:45:41 +0000 |
| commit | 1b31397fdefa861aeca22e880c40e4ce952ba53d (patch) | |
| tree | 62065acafe2c0d99c7038cac4db9244f58724f79 | |
| parent | Avoid confusing error message when attempting to use ssh-keyscan built (diff) | |
| download | wireguard-openbsd-1b31397fdefa861aeca22e880c40e4ce952ba53d.tar.xz wireguard-openbsd-1b31397fdefa861aeca22e880c40e4ce952ba53d.zip | |
sshd_config is documented to set GSSAPIStrictAcceptorCheck=yes by
default, so actually make it do this. bz#2637 ok dtucker
| -rw-r--r-- | usr.bin/ssh/servconf.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/usr.bin/ssh/servconf.c b/usr.bin/ssh/servconf.c index f9b7812f4c5..6412de7d9da 100644 --- a/usr.bin/ssh/servconf.c +++ b/usr.bin/ssh/servconf.c @@ -1,5 +1,5 @@ -/* $OpenBSD: servconf.c,v 1.301 2016/11/30 03:00:05 djm Exp $ */ +/* $OpenBSD: servconf.c,v 1.302 2017/01/06 03:45:41 djm Exp $ */ /* * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland * All rights reserved @@ -253,7 +253,7 @@ fill_default_server_options(ServerOptions *options) if (options->gss_cleanup_creds == -1) options->gss_cleanup_creds = 1; if (options->gss_strict_acceptor == -1) - options->gss_strict_acceptor = 0; + options->gss_strict_acceptor = 1; if (options->password_authentication == -1) options->password_authentication = 1; if (options->kbd_interactive_authentication == -1) |