Solaris 10 sshd + GSSAPI = where's my cred cache?

Douglas E. Engert deengert at anl.gov
Fri Nov 9 11:24:49 EST 2007



Danny Mayer wrote:
> Nicolas Williams wrote:
>> On Mon, Nov 05, 2007 at 12:06:14PM -0500, Jeff Blaine wrote:
>>> Solved.
>>>
>>> Had to force client-side "-o GSSAPIStoreDelegatedCredentials yes"

Note previous e-mail says this should have read:
  -o  "GSSAPIDelegateCredentials yes"


>>> even though it was not defined anywhere as "no" (although probably
>>> a default for some reason).
>> The manpage (ssh_config(4)) says:
>>
>>      GSSAPIDelegateCredentials
>>
>>          Enables/disables  GSS-API  credential  forwarding.   The
>>          default is no.
>>          ^^^^^^^^^^^^^

That is right from the man page.

> That makes no sense. The default is no? The default should be "Enabled"
> or "Disabled". "No" has no meaning here.

Yes it does. The value value is either yes or no.


> 
> Danny
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 
> 

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444



More information about the Kerberos mailing list