[24279] in Kerberos
Re: Windows SSH client that uses tickets not obtained from AD login
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Tue Jul 12 00:32:21 2005
From: Jeffrey Altman <jaltman2@nyc.rr.com>
Message-ID: <rxHAe.103$Y54.66@twister.nyc.rr.com>
Date: Tue, 12 Jul 2005 04:19:35 GMT
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Kermit 95 <http://www.kermit-project.org/k95.html> provides
support for SSH with GSS and it derives its tickets from KFW.
The version distributed by Columbia University is old and
not quite up to date but it works.
jay alvarez wrote:
> Hi,
> Do you know any windows ssh client that can use
> gssapi authentication and not using SSPI(used by
> vintela and CSS putty versions)wherein it uses tickets
> that were obtained from an Active Directory login? I
> have downloaded KFW from MIT and I have successfully
> obtain tickets using Leash. I tried to use vintela's
> putty but I don't know how to tell it where Leash put
> my tickets. The vintela docs says it will use the
> tickets obtained upon an Active Directory login. In
> our case, we don't use AD service. BTW, just curious,
> KFW says it places the tickets obtained from KDC
> inside the memory of the computer, I remembered my
> tickets when using kinit places it in /tmp of my unix
> box. Is there a security issue here regarding the use
> of /tmp as a storage of tickets against placing it in
> the memory?
>
> Thanks.
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
--
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
