Windows SSH client that uses tickets not obtained from AD login

Christopher D. Clausen cclausen at acm.org
Tue Jul 12 03:26:25 EDT 2005


jay alvarez <kerber0sb0y at yahoo.com> wrote:
> Hi,
>  Do you know any windows ssh client that can use
> gssapi authentication and not using SSPI(used by
> vintela and CSS putty versions)wherein it uses tickets
> that were obtained from an Active Directory login? I
> have downloaded KFW from MIT and I have successfully
> obtain tickets using Leash. I tried to use vintela's
> putty but I don't know how to tell it where Leash put
> my tickets. The vintela docs says it will use the
> tickets obtained upon an Active Directory login. In
> our case, we don't use AD service.

The version of putty at: http://www.sweb.cz/v_t_m/ works with tickets
obtained by MIT KfW.  However, it only works with gssapi-with-mic, so
you need to have OpenSSH 3.8 or higher on the server side.  I have been
using it for over a year without too many problems.  It works quite well
and the author even updated the source patch and the binary the two
times I've asked when security fixes were released for putty.

<<CDC
Christopher D. Clausen
ACM at UIUC SysAdmin




More information about the Kerberos mailing list