Starting with Debian 14 (currently unstable/testing), GSSAPI support no longer ships by default. It nowadays ships in its own separate package. Including GSSAPIKexAlgorithms in the hardening configurations results in errors:
Setting up openssh-server (1:10.4p1-5) ...
Replacing config file /etc/ssh/sshd_config with new version
/etc/ssh/sshd_config.d/ssh-audit_hardening.conf: line 10: Bad configuration option: GSSAPIKexAlgorithms
/etc/ssh/sshd_config.d/ssh-audit_hardening.conf: terminating, 1 bad configuration options
Therefore GSSAPIKexAlgorithms should no longer be included by default in the hardening guide. It can be mentioned as an extra setting to include if someone has openssh-client-gssapi or openssh-server-gssapi installed.
Starting with Debian 14 (currently unstable/testing), GSSAPI support no longer ships by default. It nowadays ships in its own separate package. Including GSSAPIKexAlgorithms in the hardening configurations results in errors:
Setting up openssh-server (1:10.4p1-5) ...
Replacing config file /etc/ssh/sshd_config with new version
/etc/ssh/sshd_config.d/ssh-audit_hardening.conf: line 10: Bad configuration option: GSSAPIKexAlgorithms
/etc/ssh/sshd_config.d/ssh-audit_hardening.conf: terminating, 1 bad configuration options
Therefore GSSAPIKexAlgorithms should no longer be included by default in the hardening guide. It can be mentioned as an extra setting to include if someone has openssh-client-gssapi or openssh-server-gssapi installed.