diff options
| author | djm@openbsd.org <djm@openbsd.org> | 2015-05-22 03:50:02 +0000 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2015-05-22 20:02:17 +1000 |
| commit | d7c31da4d42c115843edee2074d7d501f8804420 (patch) | |
| tree | 9d41af43b92f502fcce33c184064daa712d941cc /sshd_config.5 | |
| parent | aa72196a00be6e0b666215edcffbc10af234cb0e (diff) | |
| download | openssh-git-d7c31da4d42c115843edee2074d7d501f8804420.tar.gz | |
upstream commit
add knob to relax GSSAPI host credential check for
multihomed hosts bz#928, patch by Simon Wilkinson; ok dtucker
(kerberos/GSSAPI is not compiled by default on OpenBSD)
Upstream-ID: 15ddf1c6f7fd9d98eea9962f480079ae3637285d
Diffstat (limited to 'sshd_config.5')
| -rw-r--r-- | sshd_config.5 | 19 |
1 files changed, 17 insertions, 2 deletions
diff --git a/sshd_config.5 b/sshd_config.5 index 884e767b..76179adf 100644 --- a/sshd_config.5 +++ b/sshd_config.5 @@ -33,8 +33,8 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: sshd_config.5,v 1.202 2015/05/21 06:43:31 djm Exp $ -.Dd $Mdocdate: May 21 2015 $ +.\" $OpenBSD: sshd_config.5,v 1.203 2015/05/22 03:50:02 djm Exp $ +.Dd $Mdocdate: May 22 2015 $ .Dt SSHD_CONFIG 5 .Os .Sh NAME @@ -622,6 +622,21 @@ on logout. The default is .Dq yes . Note that this option applies to protocol version 2 only. +.It Cm GSSAPIStrictAcceptorCheck +Determines whether to be strict about the identity of the GSSAPI acceptor +a client authenticates against. +If set to +.Dq yes +then the client must authenticate against the +.Pa host +service on the current hostname. +If set to +.Dq no +then the client may authenticate against any service key stored in the +machine's default store. +This facility is provided to assist with operation on multi homed machines. +The default is +.Dq yes . .It Cm HostbasedAcceptedKeyTypes Specifies the key types that will be accepted for hostbased authentication as a comma-separated pattern list. |