OpenSSH client GSSAPI broken under El Capitan

Originator:adam
Number:rdar://23330784 Date Originated:30/10/2015
Status:Duplicate of 22966268 (Open) Resolved:
Product:OS X Product Version:10.11.1
Classification: Reproducible:Always
 
Summary:
Under El Capitan, it is not possible to connect to an ssh server using GSS without a work around, as the openSSH client crashes during key exchange.

Steps to Reproduce:
1) Enable GSSAPI in the OpenSSH client by uncommenting the following in /etc/ssh/ssh_config:
   GSSAPIAuthentication yes
   GSSAPIDelegateCredentials yes
   GSSAPIKeyExchange yes

2) (Optional) Obtain a Kerberos ticket using kinit or other means.

3) Attempt to connect to an SSH server supporting GSS

Expected Results:
GSSAPI authentication should happen.

Actual Results:
The openSSH client crashes, with the error: ssh_dispatch_run_fatal: Connection to xxx.xxx.xxx.xxx: unexpected internal error

Version:
10.11.1

Notes:
Disabling GSSAPIKeyExchange acts as a partial, undesirable work around (in that, key exchange is no longer performed with GSSAPI).

Configuration:

Attachments:

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!