SSH & SFTP config on Solaris 9 1

[SuperJan]

We are testing sftp but when we tried to send a file to our remote site this error appeared:

unable to initialize mechanism library [/usr/lib/gss/gl/mech_krb5.so]
xmalloc: zero size
lost connection

We checked for similar errors and a suggestion was to add the following lines to /etc/ssh/ssh_config and sshd_config files and after doing so it appeared to work.

To /etc/ssh/ssh_config add:

GSSAPIAuthentication=no
GSSAPIKeyExchange=no
StrictHostKeyChecking no

To /etc/ssh/sshd_config add:

GSSAPIAuthentication=no
GSSAPIKeyExchange=no

Then restart ssh:

/etc/init.d/sshd restart

Can you tell me what these parameters are doing and how we resolve our problem if we take them back out?

Thanks in advance

 

[Annihilannic]

Do you use Kerberos authentication at your site (note the _krb5 in the library filename)? If not, I don't think it is doing any harm to disable those options, however personally I wouldn't disable StrictHostKeyChecking unless you really need to.

Annihilannic.