[OpenAFS-devel] New OpenSSH

[Simon Wilkinson]

Garrett Wollman wrote:
> <<On Wed, 25 Feb 2004 00:02:31 +0000 (GMT), sxw@inf.ed.ac.uk said:
> 
> 
>>Also note that gssapi-with-mic is incompatible with the 'gssapi' userauth 
>>authentication method in 3.7, and earlier in my patches. There is also no
>>support for GSSAPI key exchange.
> 
> 
> So those of us who depend on this are still stuck with 3.6p1?

You're stuck with patched 3.6p1 until such time as patches are made 
available for 3.8 :-) These are being worked on, but time is in short 
supply at present. Note that the I-D has changed since the patches for 
3.6p1, and a new method of verifying the key exchange is now used (the 
previous method was vulnerable to MITM attacks)

Cheers,

Simon.