Comment 4 for bug 18218

The last time I asked Sam Hartman (who maintains ssh-krb5, and generally knows
far more about this than I do) about this shortly after OpenSSH 3.9p1 was
released, he said:

"I'd like to ask that you not enable gssapi support for the ssh package. The
problem is that there is a key exchange method that has not yet been accepted
upstream that you probably want if you want Kerberos support. Having the ssh
package do some but not all of the desired Kerberos support would be confusing
to users.

I'm not sure I know of anyone working on getting this patch accepted upstream.
All the involved parties are just too busy."

As such, I have so far refused to enable GSSAPI in the mainstream OpenSSH packages.

If this situation has changed, I'd be happy to enable it, but I'd rather discuss
it in Debian than here, since that's where the relevant experts are. The
appropriate Debian bug is #275472.