GSSAPI monitor hardening

Jakub Jelen jjelen at
Mon Sep 5 17:44:29 AEST 2016

On 09/05/2016 02:46 AM, Damien Miller wrote:
> Hi,
> Could someone who uses GSSAPI user authentication help test the
> following patch? This improves the restrictions in the privilege
> separation monitor to be a bit more stict. There should be no
> change in behaviour.
> If the patch breaks something then it should be immediately apparent -
> the server will drop connections during user-authentication.
I ran our GSSAPI tests on the code with this patch and did not notice 
any problems. Works as expected.


Jakub Jelen
Security Technologies
Red Hat

More information about the openssh-unix-dev mailing list