Windows SSH client that uses tickets not obtained from AD login

[Douglas E. Engert]

SecureCRT 4.x can use either the SSPI or the KfW gssapi.
  http://www.vandyke.com/products/securecrt/

There are mods to PuTTY that can use either SSPI and KfW.
   http://www.sweb.cz/v_t_m/#putty
  Hopefully the PuTTY people will pick these up.

We use both of these at our site.

jay alvarez wrote:

> Hi,
>  Do you know any windows ssh client that can use
> gssapi authentication and not using SSPI(used by
> vintela and CSS putty versions)wherein it uses tickets
> that were obtained from an Active Directory login? I
> have downloaded KFW from MIT and I have successfully
> obtain tickets using Leash. I tried to use vintela's
> putty but I don't know how to tell it where Leash put
> my tickets. The vintela docs says it will use the
> tickets obtained upon an Active Directory login. In
> our case, we don't use AD service. BTW, just curious,
> KFW says it places the tickets obtained from KDC
> inside the memory of the computer, I remembered my
> tickets when using kinit places it in /tmp of my unix
> box. Is there a security issue here regarding the use
> of /tmp as a storage of tickets against placing it in
> the memory?
> 
> Thanks.
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 
> 
> 

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444