From 75ebbb3bc06471a49413e5fa67eb4c893440dbda Mon Sep 17 00:00:00 2001 From: Jacob Nevins Date: Sat, 10 Sep 2022 18:54:35 +0100 Subject: [PATCH] docs: GSS kex preferences aren't configurable. --- doc/config.but | 2 ++ 1 file changed, 2 insertions(+) diff --git a/doc/config.but b/doc/config.but index d98a81c2..c8fbcf46 100644 --- a/doc/config.but +++ b/doc/config.but @@ -2386,6 +2386,8 @@ when using Kerberos V5, and not other GSSAPI mechanisms. If the user running PuTTY has current Kerberos V5 credentials, then PuTTY will select the GSSAPI key exchange methods in preference to any of the ordinary SSH key exchange methods configured in the preference list. +(PuTTY's preference order for GSSAPI-authenticated key exchange +methods is fixed, not controlled by the preference list.) The advantage of doing GSSAPI authentication as part of the SSH key exchange is apparent when you are using credential delegation (see