@@ -723,120 +723,6 @@ fakepw(void)
return (&fake);
}
-
+
-/*
- * Returns the remote DNS hostname as a string. The returned string must not
- * be freed. NB. this will usually trigger a DNS query the first time it is
@@ -993,6 +996,10 @@ parse_time:
intptr = &options->gss_deleg_creds;
goto parse_flag;
-
+
+ case oGssTrustDns:
+ intptr = &options->gss_trust_dns;
+ goto parse_flag;
+
+ if (options.gss_trust_dns) {
+ extern const char *auth_get_canonical_hostname(struct ssh *ssh, int use_dns);
-+ gss_host = auth_get_canonical_hostname(active_state, 1);
++ gss_host = auth_get_canonical_hostname(ssh, 1);
+ } else
+ gss_host = authctxt->host;
-
+
/* Try one GSSAPI method at a time, rather than sending them all at
* once. */
@@ -712,7 +719,7 @@ userauth_gssapi(struct ssh *ssh)