When using Centrify Enabled OpenSSH 8.2p1-22.214.171.124 and attempting to transfer a file over 1 GB via SCP it fails when GSSAPIKeyExchange is enabled.
The following error is seen:
ssh_dispatch_run_fatal: Connection to <ipAddress> port 22: Failed to init GSSAPI context
A change in the code for the stock version of OpenSSH-8.2p1 with the way GSSAPI sname was stored, caused an issue with Centrify Enabled OpenSSH when using GSSAPIKeyExchange for authentication.Workaround:
Turn off GSSAPIKeyExchange
on the client side in the /etc/centrifydc/ssh/ssh_config
file by setting GSSAPIKeyExchange
This issue was resolved in a one-off for Centrify Infrastructure Services 2020
(CentrifyDC-openssh-8.2p1-5.7.0-220 and higher) and in the Centrify Infrastructure Services 2020.1
release. If you need the one-off for the Centrify Infrastructure Services 2020 release, please contact Centrify Technical Support.