Kerberos5 + SSH Questions

Russ Allbery rra at
Mon Jan 3 17:31:55 EST 2011

Brian Candler <B.Candler at> writes:
> On Mon, Jan 03, 2011 at 09:53:45PM +0000, Simon Wilkinson wrote:

>> Yes. They added it in Fedora 13, and I'm told RHEL6 also ships with
>> this patch enabled. Pretty much the only vendors that don't have GSSAPI
>> key exchange support now are the BSDs.

> Any idea about the Debian-derivatives? I checked on ubuntu 10.04 and
> I didn't see this option commented out in /etc/ssh/sshd_config

Debian and Debian derivatives have had this patch applied for quite a
while.  I forget the point at which ssh-krb5 was merged in with ssh, but
it was at least by etch.  And it was available as ssh-krb5 for longer than

Russ Allbery (rra at             <>

More information about the Kerberos mailing list