Solaris Secure Shell Enhancements

This feature description is new in the Solaris Express 10/04 release.

The following enhancements to Solaris Secure Shell are available in the Solaris 10 OS:

• Solaris Secure Shell is based on OpenSSH 3.5p1. The Solaris implementation also includes features and bug fixes from versions prior to OpenSSH 3.8p1.

• Solaris Secure Shell now supports the use of the GSS-API for user and host authentication that uses Kerberos V.

  PAM support, including password-aging support, has been improved.

• The default value of X11Forwarding is yes in the /etc/ssh/sshd config file.

• The ARCFOUR and AES128-CTR ciphers are now available. ARCFOUR is also known as RC4. The AES cipher is AES in counter mode.

• For further enhancements, see the description for sshd Daemon and /etc/default/login.

For further information about security in the Solaris 10 OS, see the System Administration Guide: Security Services.