[31792] in Kerberos
Re: Kerberos tickets, SSH public key auth, AFS tokens
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Fri Dec 18 14:07:27 2009
Message-ID: <4B2BD2BF.6080906@anl.gov>
Date: Fri, 18 Dec 2009 13:06:39 -0600
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: Jeff Blaine <jblaine@stage-infinity.com>
In-Reply-To: <4B2BB534.6040602@stage-infinity.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Jeff Blaine wrote:
>> But this won't work with ssh public keys. If its winCVS
>> on Windows you are interested in, it too can support GSSAPI.
>
> Doug, I'd like to hear about WinCVS + some SSH using
> GSSAPI if that's what you're referring to (using :gserver:
> isn't going to cut it as far as I can see, since there will
> be no tokens).
We use the :gserver: since the we did not need the forwarded tickets,
and it was easier, but we have in the past use PuTTY with GSSAPI,
and have used PuTTY with Eclipse.
Google for wincvs ext putty
The WinCVS page has:
http://www.tortoisecvs.org/faq.html#puttysessions
The secret is to have a PuTTY session predefined with all the SSH Auth
options including the GSSAPI and delegate GSSAPI options.
The which PuTTY has GSSAPI:
Quest has one that uses SSPI. http://rc.quest.com/topics/putty/
The PuTTY developers have SSPI in their SVN version:
svn://svn.tartarus.org/sgt/putty.
Secure-Endpoints has or had one that uses the MIT gssapi libs.
http://v_t_m.sweb.cz/#putty has PuTTY mods to 5.8 can can use
either SSPI of GSSAPI using MIT Kerberos libs.
>
> Does anyone know of a Cygwin OpenSSH that supports GSS-API?
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
