Kerberos tickets, SSH public key auth, AFS tokens

Jeffrey Altman jaltman at secure-endpoints.com
Mon Dec 21 10:58:12 EST 2009


On 12/18/2009 12:00 PM, Jeff Blaine wrote:
> Does anyone know of a Cygwin OpenSSH that supports GSS-API?
>

There is none that I am aware of.  In order to build OpenSSH in cygwin
against KFW you will require Cygwin import libraries for each of the KFW
DLLs.  Secure Endpoints submitted a patch to MIT (RT 6504) which
contains the necessary code to build the cygwin import libraries as part
of the KFW build process.   This patch has not been integrated into the
MIT source tree.

Once you have the import libraries you can build OpenSSH from source
while modifying the Unix Makefiles to refer to the KFW import libs.  
This will produce for you an OpenSSH that can make use of the MSLSA and
API credential cache types on Windows.

Jeffrey Altman




More information about the Kerberos mailing list