- markus@cvs.openbsd.org 2003/10/08 15:21:24

     [readconf.c ssh_config.5]
     default GSS API to no in client, too; ok jakob, deraadt@

diff --git a/ChangeLog b/ChangeLog
index 9e708c2831006250762eae97ae83ddfd953ede94..d61bb8050297e5d4a1aadaa0abc6c658e6455ad7 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -8,6 +8,9 @@
      ssh: remove wrong option from list
      sftp-server: Subsystem is documented in ssh_config(5), not sshd(8)
      ok deraadt@ markus@
+   - markus@cvs.openbsd.org 2003/10/08 15:21:24
+     [readconf.c ssh_config.5]
+     default GSS API to no in client, too; ok jakob, deraadt@
 
 20031009
  - (dtucker) [sshd_config.5] UsePAM defaults to "no".  ok djm@

diff --git a/readconf.c b/readconf.c
index 13987ffa7046f8c5895d043f695fc9fa0cbece5b..5a7084fe890af95d94a49d65267697f5d5b5b2e9 100644 (file)
--- a/readconf.c
+++ b/readconf.c
@@ -12,7 +12,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: readconf.c,v 1.121 2003/09/01 18:15:50 markus Exp $");
+RCSID("$OpenBSD: readconf.c,v 1.122 2003/10/08 15:21:24 markus Exp $");
 
 #include "ssh.h"
 #include "xmalloc.h"
@@ -885,7 +885,7 @@ fill_default_options(Options * options)
        if (options->challenge_response_authentication == -1)
                options->challenge_response_authentication = 1;
        if (options->gss_authentication == -1)
-               options->gss_authentication = 1;
+               options->gss_authentication = 0;
        if (options->gss_deleg_creds == -1)
                options->gss_deleg_creds = 0;
        if (options->password_authentication == -1)

diff --git a/ssh_config.5 b/ssh_config.5
index 7a435a90e03464b85e79e2b626624bfa1dce1ac9..da162499b8555a517a862658fa4ac78dbf3849fd 100644 (file)
--- a/ssh_config.5
+++ b/ssh_config.5
@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: ssh_config.5,v 1.20 2003/09/02 18:50:06 jmc Exp $
+.\" $OpenBSD: ssh_config.5,v 1.21 2003/10/08 15:21:24 markus Exp $
 .Dd September 25, 1999
 .Dt SSH_CONFIG 5
 .Os
@@ -336,7 +336,7 @@ Specifies whether authentication based on GSSAPI may be used, either using
 the result of a successful key exchange, or using GSSAPI user
 authentication.
 The default is
-.Dq yes .
+.Dq no .
 Note that this option applies to protocol version 2 only.
 .It Cm GSSAPIDelegateCredentials
 Forward (delegate) credentials to the server.