Kerberos tickets, SSH public key auth, AFS tokens
Jeff Blaine
jblaine at stage-infinity.com
Fri Dec 18 17:43:35 EST 2009
Thanks Doug
> The which PuTTY has GSSAPI:
>
> Quest has one that uses SSPI. http://rc.quest.com/topics/putty/
Hmm, I can't see to get this to work at all (ignoring CVS).
I have KfW creds for jblaine, afs, and krbtgt on this Windows
box.
I have a QuestPuTTY session named faron.foo.org
GSSAPI is enabled for this session
GSSAPI Credential Delegation is enabled for this session
Opening the session shows:
Using username "jblaine".
Using GSSAPI service principal name "host/faron.foo.org".
jblaine at faron.foo.org's password:
The sshd debug output:
Server listening on :: port 9000.
debug1: Server will not fork when running in debugging mode.
Connection from xx.xx.0.146 port 3423
debug1: Client protocol version 2.0; client software version
PuTTY_Release_0.60_q1.129
debug1: no match: PuTTY_Release_0.60_q1.129
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-Sun_SSH_1.1.3
...
debug2: GSS-API Mechanism encoded as toWM5Slw5Ew8Mqkay+al2g==
...
debug2: kex_parse_kexinit:
gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
...
debug1: userauth-request for user jblaine service ssh-connection method
gssapi-with-mic
debug1: attempt 1 initial attempt 0 failures 1 initial failures 0
debug2: input_userauth_request: try method gssapi-with-mic
debug1: Client offered gssapi userauth with { 1 2 840 113554 1 2 2 }
(supported)
debug1: userauth-request for user jblaine service ssh-connection method none
debug1: attempt 2 initial attempt 0 failures 1 initial failures 0
debug2: Unrecognized authentication method name: none
Failed none for jblaine from xx.xx.0.146 port 3423 ssh2
debug1: userauth-request for user jblaine service ssh-connection method
password
debug1: attempt 3 initial attempt 0 failures 3 initial failures 0
debug2: input_userauth_request: try method password
debug2: Starting PAM service sshd-password for method password
Accepted password for jblaine from xx.xx.0.146 port 3423 ssh2
More information about the Kerberos
mailing list