IETF-SSH archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: gss userauth



> If the MIC is set with the last gss exchange packet, you would have 0 or 1
> extra packets. 0 in the case where the last exchange packets is from the
> client and 1 when the last exchange packet is from the server. So I would
> argue that its not a extra roundtrip, but rather none (with more data) or a
> half.

I think with the way GSSAPI userauth happens to be defined, you can
just piggyback the data on this packet that already gets sent anyway,
and you never add round trips vs what the protocol already does:

           byte      SSH_MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETE







Home | Main Index | Thread Index | Old Index