On Wed, Sep 14, 2005 at 09:21:53PM -0400, Aaron M. Ucko wrote: > Package: openssh-client > Version: 1:4.2p1-2 > Severity: normal > Tags: patch > > Given that openssh-krb5 is frequently several upstream versions > behind, I am glad to see that the "vanilla" openssh packages now have > sxw's patch applied and GSSAPI enabled; thanks for going ahead with > that!
Thank Stephen Frost for (at my request) nagging me until I did it, too. :-) > However, I have found that ssh needs a small additional patch > (attached) in order to work properly with servers sporting older > versions of the GSSAPI patch, which deal in untagged OIDs and use a > slightly different name for the authentication method. I suspect that > an analogous patch would be necessary to allow newer servers to > support older clients, but I can't test that combination so readily, > and I'd argue that that's less important on the grounds that it's no > harder for users to deploy newer clients than for them to get their > sysadmins to deploy newer servers. > > Anyway, here's the patch, lifted from openssh-krb5: OK. This patch looks fine, and I've applied it, except that in input_gssapi_response it never initialised oidv_free to anything. I've fixed that up in the obvious way. Cheers, -- Colin Watson [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
