On Fri, 22 Aug 2008, Wayne Betts wrote:

<snip>
>>  Hi Wayne,
>>  This is not an oops, it is on purpose.
>>   From the README in that directory
>>
>>  "These versions of openssh have been patched to be able to use
>>  both the old and the new versions of gssapi.  This allows them
>>  to do kerberos authentication with both kerberized openssh before
>>  openssh 3.9, and after openssh 3.9"
>>
>>  But we do not have the openssh server configured so that it does kerberos
>>  only, like we do in SLF's version of openssh-server.
>>  Why?
>>  Well, if we did, you'd be worrying alot more than just having it do aklog
>>  when you log in.  You wouldn't be able to log in any other way than
>>  kerberos.  And I don't think you want that.
>>  So we have it configured to have the same settings that you get with the
>>  regular openssh-server that you get from RedHat.
>
> Thanks for the response Troy, but I'll have to put on the SL dunce hat and 
> sit in a corner for a while, because I've searched in vain for the README or 
> directory you're referring to.

Look for example in:

   ftp://ftp.scientificlinux.org/linux/scientific/46/i386/contrib/RPMS/openssh/

I note that the text of the README is different in:

   ftp://ftp.scientificlinux.org/linux/scientific/46/x86_64/contrib/RPMS/openssh/

but that may be intentional.

If you don't want the extra kerb stuff you may not want these contrib 
packages.

  -- Jon