[Bug 28487] Re: ssh should not try to verify hostkey when only gssapi is used

Quomoow quomoow at gmail.com
Sat Dec 17 02:41:45 UTC 2016


seems to be fixed (dead)

** Changed in: openssh (Ubuntu)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/28487

Title:
  ssh should not try to verify hostkey when only gssapi is used

Status in openssh package in Ubuntu:
  Fix Released

Bug description:
  If I only have gssapi-keyx and gssapi-with-mic enabled (everything
  else is disabled) and I am missing a valid kerberos ticket, openssh
  asks me if i want to accept the hostkey (unless I already have
  accepted it). If I have a valid ticket I am not asked to verify the
  hostkey. When using gssapi/kerberos the hostkeys are pretty useless as
  the the validity of the host are verified through kerberos/gssapi.

  /torkel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/28487/+subscriptions



More information about the foundations-bugs mailing list