Solaris 10 sshd + GSSAPI = where's my cred cache?

Danny Mayer mayer at ntp.isc.org
Thu Nov 8 23:04:11 EST 2007


Nicolas Williams wrote:
> On Mon, Nov 05, 2007 at 12:06:14PM -0500, Jeff Blaine wrote:
>> Solved.
>>
>> Had to force client-side "-o GSSAPIStoreDelegatedCredentials yes"
>> even though it was not defined anywhere as "no" (although probably
>> a default for some reason).
> 
> The manpage (ssh_config(4)) says:
> 
>      GSSAPIDelegateCredentials
> 
>          Enables/disables  GSS-API  credential  forwarding.   The
>          default is no.
>          ^^^^^^^^^^^^^
That makes no sense. The default is no? The default should be "Enabled"
or "Disabled". "No" has no meaning here.

Danny



More information about the Kerberos mailing list