Putty + GSSAPI from W2k3 terminal server to linux openssh daemon

Richard E. Silverman res at qoxp.net
Wed Nov 5 10:53:19 EST 2008


>>>>> "res" == Richard E Silverman <res at qoxp.net> writes:

>>>>> "petesea" == petesea  <petesea at bigfoot.com> writes:
    petesea> On Fri, 31 Oct 2008, deengert at anl.gov wrote:
    >>> The v_t_m version could use either the Microsoft SSPI, or the MIT
    >>> GSSAPI as implemented bi the MIT gssapi32.dll. The new PuTTY only
    >>> does SSPI so there are some implications if you are trying to use
    >>> this from a non-windows domain machine. (But runas could be used.)

    petesea> That's unfortunate, I wish they would implement both methods.

    petesea> I also wish they would implement GSSAPI Key Exchange, to
    petesea> avoid the need to maintain host keys on the client.  I
    petesea> haven't found any implementation of PuTTY that supports both
    petesea> MIT GSSAPI and GSSAPI Key Exchange.

    res> http://rc.quest.com/topics/PuTTY/

Oops, you said *MIT* GSSAPI.  Indeed.  FYI, in the commercial world,
SecureCRT does this.

    res> -- Richard Silverman res at qoxp.net


-- 
  Richard Silverman
  res at qoxp.net




More information about the Kerberos mailing list