These versions of openssh have been patched to be able to use both the old and the new versions of gssapi. This allows them to do kerberos authentication with both kerberized openssh before openssh 3.9, and after openssh 3.9 Do note that in order to patch these, that the selinux patch had to be be taken out. Troy Dawson