PowerShell / PowerShell/Win32-OpenSSH

Bad configuration option: GSSAPIDelegation

Open
#2,227 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Issue-Question Waiting on Author
Dominant language
No language data
Stars
8.3k
Forks
819
PR merge metrics
No merged PRs in 30d

Description

Prerequisites
  • Write a descriptive title.
  • Make sure you are able to repro it on the latest version
  • Search the existing issues.
Steps to reproduce

Hi,
I would like to enable authentication delegation through SSHD in order to use kerberos.
The aim is to be able to run powershell commands like get-childitem and Invoke-DbaQuery through ssh.

When I enable the “GSSAPIAuthentication yes” option, I can restart the SSHD deamon without error.

But when I activate the “GSSAPIDelegation yes” option I get the error “Bad configuration option: GSSAPIDelegation”.

My configuration :

Windows Server 2022 21H2
OpenSSH_for_Windows_8.1p1, LibreSSL 3.0.2

Expected behavior
Service SSHd Up
Actual behavior
Service SSHd Down
Error details
__PROGRAMDATA__\\ssh/sshd_config: line 59: Bad configuration option: GSSAPIDelegation
Environment data
Name                           Value
----                           -----
PSVersion                      7.4.1
PSEdition                      Core
GitCommitId                    7.4.1
OS                             Microsoft Windows 10.0.20348
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0
Version

OpenSSH_for_Windows_8.1p1, LibreSSL 3.0.2

Visuals

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the sshd_config entry at line 59 and reproduce the failure on OpenSSH_for_Windows 8.1p1 using the supplied GSSAPIAuthentication and GSSAPIDelegation settings. Check how this version validates the option; done means the supported configuration behavior is documented or corrected and the SSHD service starts with the intended delegation setting.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, operating-systems, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.