Attachment #908139 for bug #795135

Lines 1340-1346 main(int ac, char **av) Link Here

(-)a/sshd-session.c (-1 / +1 lines)
1340	#ifdef GSSAPI	1340	#ifdef GSSAPI
1341	if (options.gss_authentication) {	1341	if (options.gss_authentication) {
1342	temporarily_use_uid(authctxt->pw);	1342	temporarily_use_uid(authctxt->pw);
1343	ssh_gssapi_storecreds();	1343	authctxt->krb5_set_env = ssh_gssapi_storecreds();
1344	restore_uid();	1344	restore_uid();
1345	}	1345	}
1346	#endif	1346	#endif

Lines 1002-1007 Specifies whether to automatically destroy the user's ticket cache Link Here

(-)a/sshd_config.5 (-1 / +8 lines)
1002	file on logout.	1002	file on logout.
1003	The default is	1003	The default is
1004	.Cm yes .	1004	.Cm yes .
		1005	.It Cm KerberosUniqueCCache
		1006	Specifies whether to store the acquired tickets in the per-session credential
		1007	cache under /tmp/ or whether to use per-user credential cache as configured in
		1008	.Pa /etc/krb5.conf .
		1009	The default value
		1010	.Cm no
		1011	can lead to overwriting previous tickets by subseqent connections to the same
		1012	user account.
1005	.It Cm KexAlgorithms	1013	.It Cm KexAlgorithms
1006	Specifies the permitted KEX (Key Exchange) algorithms that the server will	1014	Specifies the permitted KEX (Key Exchange) algorithms that the server will
1007	offer to clients.	1015	offer to clients.
1008	-

Return to bug 795135