HP NonStop SSH Reference Manual Configuring and Running SSH2 • 71
GSSGEXKEX
Use this parameter to enable GSSAPI key exchange with group exchange, in accordance with the RFC 4462 standard
(gss-gex-sha1-* key exchange algorithms).
Parameter Syntax
GSSGEXKEX [TRUE|FALSE]
Arguments
TRUE
GSSAPI kex with group exchange is enabled.
FALSE
GSSAPI kex with group exchange is disabled.
Default
By default, GSSAPI key exchange with group exchange is disabled (FALSE).
Considerations
• GSSGEXKEX is ignored if GSSAUTH is set to “*” (disabled) or GSSKEX is set to FALSE (disabled).
• Enabling GSSGEXKEX may cause problems with an SSH client if there is a faulty implementation of GSS key
exchange with group exchange.
See also:
• GSSAUTH, GSSKEX, ALLOWEDAUTHENTICATIONS
• Section "Single Sign-on with GSSAPI Authentication".
GSSKEX
Use this parameter to enable GSSAPI key exchange in accordance with RFC 4462.
Parameter Syntax
GSSKEX [TRUE|FALSE]
Arguments
TRUE
GSSAPI key exchange is enabled.
FALSE
GSSAPI key exchange is disabled.
Default
By default, GSSAPI key exchange is enabled (TRUE).
Considerations
• GSSKEX only takes effect if GSSAPI authentication is enabled. GSSKEX is ignored if GSSAUTH is set to “*”
(disabled).
See also:
• GSSAUTH, GSSGEXKEX, ALLOWEDAUTHENTICATIONS