+++ This bug was initially created as a clone of Bug #167444 +++ destroy credentials if krb5_kuserok() call fails. Stops credentials being delegated to users who are not authorised for GSSAPIAuthentication when GSSAPIDeletegateCredentials=yes and another authentication mechanism succeeds;
This issue may also affect FC3
FC3 packages fixed - openssh-3.9p1-8.0.3 FC4 packages upgraded to 4.2p1 - openssh-4.2p1-fc4.1 (in testing)