Add server-side GSSAPIDelegateCredentials option, enabled for use with

[gssapi-openssh.git] / openssh / sshd.c

diff --git a/openssh/sshd.c b/openssh/sshd.c
index f5fd963abe3a45c41825a36513664b54228d3de3..f0c0a2ff982eadc9177d0f065a58b45afcae1afd 100644 (file)
--- a/openssh/sshd.c
+++ b/openssh/sshd.c
@@ -1929,7 +1929,7 @@ main(int ac, char **av)
 #endif
 
 #ifdef GSSAPI
-       if (options.gss_authentication) {
+       if (options.gss_authentication && options.gss_deleg_creds) {
                temporarily_use_uid(authctxt->pw);
                ssh_gssapi_storecreds();
                restore_uid();