Dmitry Belyavskiy proposed a patch for this issue at https://github.com/openssh-gsskex/openssh-gsskex/pull/21.
I created a PPA with the proposed fix at https://launchpad.net/~athos-ribeiro/+archive/ubuntu/openssh-gssapi-fix/+packages and I can confirm it does fix the reproducer proposed in this bug.
Moreover, running the server with
/usr/sbin/sshd -d -p 2222 -f /dev/null -o GSSAPIKeyExchange=yes -o GSSAPIAuthentication=yes -o PasswordAuthentication=yes -o PermitRootLogin=yes
And logging in as root, will prompt for the root password and get you a proper ssh connection.
Finally, I also ran the available openssh dep8 test suite to ensure the patch would not introduce covered regrerssions.
autopkgtest [17:57:18]: @@@@@@@@@@@@@@@@@@@@ summary regress PASS
Niklas, it would be really nice if you could also test the proposed patch to confirm it does fix the reported issue.
Dmitry Belyavskiy proposed a patch for this issue at https:/ /github. com/openssh- gsskex/ openssh- gsskex/ pull/21.
I created a PPA with the proposed fix at https:/ /launchpad. net/~athos- ribeiro/ +archive/ ubuntu/ openssh- gssapi- fix/+packages and I can confirm it does fix the reproducer proposed in this bug.
Moreover, running the server with
/usr/sbin/sshd -d -p 2222 -f /dev/null -o GSSAPIKeyExchan ge=yes -o GSSAPIAuthentic ation=yes -o PasswordAuthent ication= yes -o PermitRootLogin=yes
And logging in as root, will prompt for the root password and get you a proper ssh connection.
Finally, I also ran the available openssh dep8 test suite to ensure the patch would not introduce covered regrerssions.
autopkgtest [17:57:18]: @@@@@@@ @@@@@@@ @@@@@@ summary
regress PASS
Niklas, it would be really nice if you could also test the proposed patch to confirm it does fix the reported issue.