[28703] in Kerberos
Re: Solaris 10 sshd + GSSAPI = where's my cred cache?
daemon@ATHENA.MIT.EDU (Danny Mayer)
Fri Nov 9 13:53:16 2007
Message-ID: <4734AB98.8060902@ntp.isc.org>
Date: Fri, 09 Nov 2007 13:48:56 -0500
From: Danny Mayer <mayer@ntp.isc.org>
MIME-Version: 1.0
To: Simon Wilkinson <simon@sxw.org.uk>
In-Reply-To: <29C05AE0-C383-4131-B67E-61BE8E179C40@sxw.org.uk>
X-kostecke.net-MailScanner-From: mayer@ntp.isc.org
Cc: Jeff Blaine <jblaine@kickflop.net>, kerberos@mit.edu
Reply-To: mayer@ntp.isc.org
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Simon Wilkinson wrote:
>
> On 9 Nov 2007, at 04:04, Danny Mayer wrote:
>
>>>
>>> The manpage (ssh_config(4)) says:
>>>
>>> GSSAPIDelegateCredentials
>>>
>>> Enables/disables GSS-API credential forwarding. The
>>> default is no.
>>> ^^^^^^^^^^^^^
>> That makes no sense. The default is no? The default should be "Enabled"
>> or "Disabled". "No" has no meaning here.
>
> All boolean options to both Sun and OpenSSH only take yes/no arguments.
> So, the meaning of "GSSAPIDelegateCredentials no" would seem pretty clear.
>
> Simon.
>
>
So what this should be saying is the default *value* of
GSSAPIDelagateCredentials is No. It's worded really badly.
Danny
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
