[22823] in Kerberos
Re: Kerberized RSH for Windows
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Tue Nov 9 11:35:06 2004
Message-ID: <4190EFC5.8020404@anl.gov>
Date: Tue, 09 Nov 2004 10:26:45 -0600
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: John Harris <harris@ucdavis.edu>
In-Reply-To: <Pine.GSO.4.58.0411081542240.17637@angmar.ucdavis.edu>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
John Harris wrote:
> Greetings,
>
> One of my projects here at UCDavis is attempting to take a forwardable
> Kerberos credential and forward it to a server for later use. The goal is
> to NOT have the credential disappear when the forwarding call is made, and
> the keep the renewable flag intact.
>
> In trying to do this, we wanted to use a Kerberized rsh client, make the
> call with forwarding on and then run a script on the other side to copy
> the ticket to another location (other than the default), where an
> application would use it later.
>
> I notice there is no rsh client in the Kerberos for Windows distribution.
> There is one in the Heimdal travelkit, but it doesn't work against
> anything other than a Heimdal KDC. There is also an OLD NCSA client that
> doesn't work either.
>
I have the old NCSA rsh and ftp working with KfW-2.6.5 if you are interested.
We don't promote it, prefering ssh, but they still works.
> Is there a Kerberized rsh client that is current? And if not, are there
> other suggestable solutions? The biggest issue is making the connection,
> forwarding the ticket, and running something on the other side to keep it
> in an alternate location for batch jobs to use later.
>
Another alternative is SSH. There are a number of windows versions
available that do gssapi, and can forward a ticket. Kermit,
SecureCRT and PuTTY-0.56 with (gssapi mods) can all work with KfW.
And some can work directly with the Microsoft built in Kerberos,
so KfW is not needed.
> Thanks a million,
>
> John Harris
> Campus Data Center Administrator
> University of California, Davis
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
