[OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

[Alexander Pyhalov]

Hello.

Currently OpenSSH in OpenIndiana supports GSSAPIKeyExchange option
and enables it by default
(support for authenticating server via GSSAPI - alternative to
distributing server ssh keys) - 
http://www.sxw.org.uk/computing/patches/openssh.html .
This is a separate patch (but widespread one - it is supported by Debian 
and RedHat).

The issue is that if DNS is misconfigured on client side, it can lead to 
long delays
while connecting to ssh server.

The question is - who does really use this option on OI? Can we just 
drop this patch
(or at least disable it by default) without significant impact on user 
systems?
-- 
System Administrator of Southern Federal University Computer Center