I copy over some usage notes from Peter Vrabec’s intial announcement of the patch:
It adds a new commandline option ‘-g’ to listen for a connection wrapped with gss-api and few new configuration directives:
$gsslistenservicename <service name>
$gssforwardservicename <service name>
With gssmode set to “encryption” or “integrity” all tcp selectors will be forwarding messages via gss-api.
That’s probably useful while I am getting up some real documentation.