[30414] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Putty + GSSAPI from W2k3 terminal server to linux openssh daemon

daemon@ATHENA.MIT.EDU (Richard E. Silverman)
Wed Nov 5 16:06:43 2008

From: "Richard E. Silverman" <res@qoxp.net>
Date: Wed, 05 Nov 2008 10:53:19 -0500
Message-ID: <m27i7i41ao.fsf@darwin.oankali.net>
MIME-Version: 1.0
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

>>>>> "res" == Richard E Silverman <res@qoxp.net> writes:

>>>>> "petesea" == petesea  <petesea@bigfoot.com> writes:
    petesea> On Fri, 31 Oct 2008, deengert@anl.gov wrote:
    >>> The v_t_m version could use either the Microsoft SSPI, or the MIT
    >>> GSSAPI as implemented bi the MIT gssapi32.dll. The new PuTTY only
    >>> does SSPI so there are some implications if you are trying to use
    >>> this from a non-windows domain machine. (But runas could be used.)

    petesea> That's unfortunate, I wish they would implement both methods.

    petesea> I also wish they would implement GSSAPI Key Exchange, to
    petesea> avoid the need to maintain host keys on the client.  I
    petesea> haven't found any implementation of PuTTY that supports both
    petesea> MIT GSSAPI and GSSAPI Key Exchange.

    res> http://rc.quest.com/topics/PuTTY/

Oops, you said *MIT* GSSAPI.  Indeed.  FYI, in the commercial world,
SecureCRT does this.

    res> -- Richard Silverman res@qoxp.net


-- 
  Richard Silverman
  res@qoxp.net

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post