sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.
Weakness
The product does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform.