If the 'description' field has "needs ssh-dss" in it, we need to enable ssh-dss in ssh

awit-ssh

@@ -140,6 +140,8 @@ if ($mesg->code()) {
 }
 
 
+# Some flags we may need
+my $needDSS;
 
 
 # If no matches
@@ -192,6 +194,10 @@ if ($ldapEntry) {
 		foreach my $line (split(/\n/,$ldapDescription)) {
 			logger('INFO',"    %s",$line);
 		}
+		# Hack'ish ... look if the description mentions dss is required...
+		if ($ldapDescription =~ /needs ssh-dss/i) {
+			$needDSS = 1;
+		}
 	}
 
 	# Check if we have a wiki page
@@ -218,6 +224,13 @@ if (defined($port)) {
 }
 
 logger('NOTICE',"Connecting to host '$host'" . (defined($port) ? " on port '$port'" : "") . "...");
+# If the server is ancient, we need to enable DSS
+if (defined($needDSS)) {
+	push(@sshArgs,'-o','PubkeyAcceptedKeyTypes=+ssh-dss');
+	push(@sshArgs,'-o','HostbasedKeyTypes=+ssh-dss');
+	push(@sshArgs,'-o','HostKeyAlgorithms=+ssh-dss');
+}
+
 exec('/usr/bin/ssh',
 		'-F',$ENV{"HOME"}.'/.ssh/config',
 		'-o','PreferredAuthentications=publickey,keyboard-interactive',