Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bad configuration option: GSSAPIDelegation #2227

Open
3 tasks done
bvivi57 opened this issue Apr 25, 2024 · 1 comment
Open
3 tasks done

Bad configuration option: GSSAPIDelegation #2227

bvivi57 opened this issue Apr 25, 2024 · 1 comment
Labels
Issue-Question Waiting on Author Need more information to diagnose

Comments

@bvivi57
Copy link

bvivi57 commented Apr 25, 2024

Prerequisites

  • Write a descriptive title.
  • Make sure you are able to repro it on the latest version
  • Search the existing issues.

Steps to reproduce

Hi,
I would like to enable authentication delegation through SSHD in order to use kerberos.
The aim is to be able to run powershell commands like get-childitem and Invoke-DbaQuery through ssh.

When I enable the “GSSAPIAuthentication yes” option, I can restart the SSHD deamon without error.

But when I activate the “GSSAPIDelegation yes” option I get the error “Bad configuration option: GSSAPIDelegation”.

My configuration :

Windows Server 2022 21H2
OpenSSH_for_Windows_8.1p1, LibreSSL 3.0.2

Expected behavior

Service SSHd Up

Actual behavior

Service SSHd Down

Error details

__PROGRAMDATA__\\ssh/sshd_config: line 59: Bad configuration option: GSSAPIDelegation

Environment data

Name                           Value
----                           -----
PSVersion                      7.4.1
PSEdition                      Core
GitCommitId                    7.4.1
OS                             Microsoft Windows 10.0.20348
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0

Version

OpenSSH_for_Windows_8.1p1, LibreSSL 3.0.2

Visuals

No response

@tgauth
Copy link
Collaborator

tgauth commented Apr 29, 2024

GSSAPIDelegation is an argument for ssh_config, not sshd_config.
Passing -K as a command-line argument to ssh has the same effect as setting it in ssh_config.

@tgauth tgauth added Issue-Question Waiting on Author Need more information to diagnose labels Apr 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Issue-Question Waiting on Author Need more information to diagnose
Projects
None yet
Development

No branches or pull requests

2 participants