SSH Reference Manual

• The GSSAUTH interface process is part of the Kerberos installation on your NonStop Server.

See also

• GSSKEX, GSSGEXKEX, ALLOWEDAUTHENTICATIONS

• Section "Single Sign-on with GSSAPI Authentication".

GSSGEXKEX

Use this parameter to enable GSSAPI key exchange with group exchange, in accordance with the RFC 4462 standard

(gss-gex-sha1-* key exchange algorithms).

Parameter Syntax

GSSGEXKEX TRUE|FALSE

Arguments

TRUE

GSSAPI kex with group exchange is enabled.

FALSE

GSSAPI kex with group exchange is disabled.

Default

By default, GSSAPI key exchange with group exchange is disabled (FALSE).

Considerations

• GSSGEXKEX is ignored if GSSAUTH is set to “*” (disabled) or GSSKEX

is set to FALSE (disabled).

• Enabling GSSGEXKEX may cause problems with an SSH client if there is a faulty implementation of GSS key

exchange with group exchange.