Bug 428198 – Openssh_5.9 fails when using GSSAPI (heimdal 1.5.1)

• Status: RESOLVED INVALID
• Product: Gentoo Security

[Description aligh.workbox 2012-07-26 15:42:44 UTC]

I try to login to a remote host using kerberized ssh but I get the error:

.ssh/config: line 4: Bad configuration option: GSSAPIKeyExchange
.ssh/config: terminating, 1 bad configuration options





Reproducible: Always




Contents of my .ssh/config:
---
Host *.domain
GSSAPIAuthentication            yes
GSSAPIDelegateCredentials       yes
GSSAPIKeyExchange               yes
PreferredAuthentications        gssapi-keyx,gssapi-with-mic
---

emerge --info

---

Portage 2.1.10.65 (default/linux/amd64/10.0/no-multilib, gcc-4.5.3, glibc-2.14.1-r3, 3.3.8-gentoo x86_64)
=================================================================
System uname: Linux-3.3.8-gentoo-x86_64-Intel-R-_Core-TM-2_CPU_6400_@_2.13GHz-with-gentoo-2.1
Timestamp of tree: Thu, 26 Jul 2012 09:30:01 +0000
app-shells/bash:          4.2_p20
dev-lang/python:          2.7.3-r2, 3.2.3
dev-util/cmake:           2.8.7-r5
dev-util/pkgconfig:       0.26
sys-apps/baselayout:      2.1-r1
sys-apps/openrc:          0.9.8.4
sys-apps/sandbox:         2.5
sys-devel/autoconf:       2.13, 2.68
sys-devel/automake:       1.11.1
sys-devel/binutils:       2.21.1-r1
sys-devel/gcc:            4.5.3-r2
sys-devel/gcc-config:     1.6
sys-devel/libtool:        2.4-r1
sys-devel/make:           3.82-r1
sys-kernel/linux-headers: 3.1 (virtual/os-headers)
sys-libs/glibc:           2.14.1-r3
Repositories: gentoo
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=core2 -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"

...
---

[Comment 1 SpanKY 2012-07-26 16:24:27 UTC]

not a security bug.  you're trying to use a ssh config option your ssh client doesn't support.