Danny Mayer wrote:
> Simon Wilkinson wrote:
>> On 9 Nov 2007, at 04:04, Danny Mayer wrote:
>>
>>>> The manpage (ssh_config(4)) says:
>>>>
>>>> GSSAPIDelegateCredentials
>>>>
>>>> Enables/disables GSS-API credential forwarding. The
>>>> default is no.
>>>> ^^^^^^^^^^^^^
>>> That makes no sense. The default is no? The default should be "Enabled"
>>> or "Disabled". "No" has no meaning here.

>> All boolean options to both Sun and OpenSSH only take yes/no arguments.
>> So, the meaning of "GSSAPIDelegateCredentials no" would seem pretty clear.
>>
>> Simon.
>>
>>

>
> So what this should be saying is the default *value* of
> GSSAPIDelagateCredentials is No. It's worded really badly.


And the default should be no. You only want to delegate to systems you trust
with your tickets. You as a user can use the ~/.ssh/ssh_config
to set it to yes for selected hosts.

>
> Danny
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>


--

Douglas E. Engert
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444