[gsi-openssh-announce] GSI-OpenSSH 4.7 released

Jim Basney jbasney at ncsa.uiuc.edu
Fri Sep 11 10:08:04 CDT 2009

GSI-OpenSSH 4.7, based on OpenSSH 5.2p1, is now available from:


For installation instructions, please see:


We appreciate your feedback and help in testing this version.
Please use Bugzilla to report GSI-OpenSSH bugs:


Major changes:

  * Configure $GLOBUS_LOCATION/etc/ssh/ssh_config to enable only
    GSSAPI authentication methods on the client-side, so other methods
    (such as password or public key) aren't attempted when GSI
    authentication fails. We expect users to select a standard ssh
    client (rather than gsissh) for those methods. The server still
    supports all methods by default to support both GSI and non-GSI

  * Updated to 20090726 patch from Simon Wilkinson
    (http://www.sxw.org.uk/computing/patches/openssh.html) which adds
    support for cascading credentials.

  * Add support for PAM user switching when "PermitPAMUserChange yes"
    is set in $GLOBUS_LOCATION/etc/ssh/sshd_config.

  * Update to HPN13V6
    (http://www.psc.edu/networking/projects/hpn-ssh/) excluding
    multi-threaded AES-CTR support due to unresolved problem that
    causes the cipher to hang.

  * No longer provide the gsi_openssh_compat package which installed
    ssh, scp, and sftp symlinks in $GLOBUS_LOCATION/bin, as these
    commands are now provided by default on common Unix systems.

  * Fix link error on MacOSX 10.6.0.

SHA1 checksum:
f04e832473120838bd17daf8499c52c6c1b732f1  gsi_openssh_bundle-4.7-src.tar.gz

MD5 checksums:
ffc705e26f8edf74b6597350216dc080  gsi_openssh_bundle-4.7-src.tar.gz
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3332 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.globus.org/pipermail/gsi-openssh-announce/attachments/20090911/4f348d51/attachment.bin>

More information about the gsi-openssh-announce mailing list