HCoop changes to sshd_config for Kerberos support

Enable GSSAPI Authentication, ensure credentials are destroyed on
logout. Use kerberos host key for verficiation instead of the ssh host
keys (it's how we do it now and it seems sane since kerberos is the
law at HCoop).

diff --git a/files/sshd_config b/files/sshd_config
index ea0303b..497234b 100644 (file)
--- a/files/sshd_config
+++ b/files/sshd_config
@@ -55,9 +55,13 @@ ChallengeResponseAuthentication no
 #KerberosOrLocalPasswd yes
 #KerberosTicketCleanup yes
 
+# hcoop-changes
 # GSSAPI options
-#GSSAPIAuthentication no
-#GSSAPICleanupCredentials yes
+GSSAPIAuthentication yes
+GSSAPICleanupCredentials yes
+# Check the kerberos host key instead of the ssh host keys
+GSSAPIKeyExchange yes 
+# hcoop-changes
 
 X11Forwarding yes
 X11DisplayOffset 10