Commits on Sep 9, 2024

1. support authentication indicators in GSSAPI …

   RFC 6680 defines a set of GSSAPI extensions to handle attributes
   associated with the GSSAPI names. MIT Kerberos and FreeIPA use
   name attributes to add information about pre-authentication methods used
   to acquire the initial Kerberos ticket. The attribute 'auth-indicators'
   may contain list of strings that KDC has associated with the ticket
   issuance process.
   
   Use authentication indicators to authorise or deny access to SSH server.
   GSSAPIIndicators setting allows to specify a list of possible indicators
   that a Kerberos ticket presented must or must not contain. More details
   on the syntax are provided in sshd_config(5) man page.
   
   Fixes: https://bugzilla.mindrot.org/show_bug.cgi?id=2696
   
   Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>

   

   abbra committed Sep 9, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 7a0bab8
   • Browse repository at this point

   Copy the full SHA

   7a0bab8 View commit details

   Browse the repository at this point in the history