[24284] in Kerberos
Re: Windows SSH client that uses tickets not obtained from AD login
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Tue Jul 12 11:09:16 2005
Message-ID: <42D3DBF4.8030007@anl.gov>
Date: Tue, 12 Jul 2005 10:04:20 -0500
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: jay alvarez <kerber0sb0y@yahoo.com>
In-Reply-To: <20050712033612.78940.qmail@web32406.mail.mud.yahoo.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
SecureCRT 4.x can use either the SSPI or the KfW gssapi.
http://www.vandyke.com/products/securecrt/
There are mods to PuTTY that can use either SSPI and KfW.
http://www.sweb.cz/v_t_m/#putty
Hopefully the PuTTY people will pick these up.
We use both of these at our site.
jay alvarez wrote:
> Hi,
> Do you know any windows ssh client that can use
> gssapi authentication and not using SSPI(used by
> vintela and CSS putty versions)wherein it uses tickets
> that were obtained from an Active Directory login? I
> have downloaded KFW from MIT and I have successfully
> obtain tickets using Leash. I tried to use vintela's
> putty but I don't know how to tell it where Leash put
> my tickets. The vintela docs says it will use the
> tickets obtained upon an Active Directory login. In
> our case, we don't use AD service. BTW, just curious,
> KFW says it places the tickets obtained from KDC
> inside the memory of the computer, I remembered my
> tickets when using kinit places it in /tmp of my unix
> box. Is there a security issue here regarding the use
> of /tmp as a storage of tickets against placing it in
> the memory?
>
> Thanks.
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
