[30408] in Kerberos
Re: Putty + GSSAPI from W2k3 terminal server to linux openssh daemon
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Mon Nov 3 10:11:50 2008
Message-ID: <490F1413.7090001@anl.gov>
Date: Mon, 03 Nov 2008 09:09:07 -0600
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: petesea@bigfoot.com
In-Reply-To: <alpine.OSX.1.10.0811011133250.558@zippy-air>
Cc: putty@projects.tartarus.org, kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
petesea@bigfoot.com wrote:
> On Fri, 31 Oct 2008, deengert@anl.gov wrote:
>
>> The v_t_m version could use either the Microsoft SSPI, or the MIT GSSAPI
>> as implemented bi the MIT gssapi32.dll. The new PuTTY only does SSPI so
>> there are some implications if you are trying to use this from a
>> non-windows domain machine. (But runas could be used.)
>
> That's unfortunate, I wish they would implement both methods.
Please express your concerns to the PuTTY people. A few years ago I tried
to get then to add GSS. They added initial support in the SVN so they are open
to suggestions. The wishlist page:
http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/kerberos-gssapi.html
says: "fixed-in: r8138 2008-08-10". The Audit trail on the wishlist page says:
"We've got this. Perhaps if we say so we can get more pre-release testing."
>
> I also wish they would implement GSSAPI Key Exchange, to avoid the need to
> maintain host keys on the client. I haven't found any implementation of
> PuTTY that supports both MIT GSSAPI and GSSAPI Key Exchange.
That would be nice.
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
