nixpkgs/nixos/modules/services/networking/ssh
Thomas Gerbet ef6fea2d86 openssh: move Kerberos support into a dedicated package
The `openssh` and `openssh_hpn` packages are now built without
the Kerberos support by default in an effort to reduce the attack surface.

The Kerberos support is likely used only by a fraction of the total users
(I'm guessing mainly users integrating SSH in an Active Directory env) so
dropping it should not impact too many users. It should also be noted that
the Kerberos/GSSAPI auth is disabled by default in the configuration.
`opensshWithKerberos` and `openssh_hpnWithKerberos` are added in order
to provide an easy migration path for users needing this support.

The `openssh_gssapi` package is kept untouched.
2024-06-05 19:45:31 +10:00
..
lshd.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
sshd.nix openssh: move Kerberos support into a dedicated package 2024-06-05 19:45:31 +10:00