--On Wednesday, April 12, 2006 2:26 PM -0700 Dan Peterson
<petesea at bigfoot.com> wrote:
> The GOAL is a GSSAPI enabled ssh client (preferably with gssapi-keyex
> support) that uses the nice GUI front-end provided by KfW. Those windows
> users get too confused if you tell them they have to go to the command
> prompt and run "kinit" every morning.
FYI if you use the native SSPI, your tickets are refreshed every time you
unlock your screen. Of course SSPI presumes you either use your AD servers
as your KDCs for all systems, or that you have a trust relationship between
the realms. There are at least 3 SSPI SSH clients I know of:
- patched PuTTY (2 different versions exist, but only one allows you
specify the host principal, which is required for x-realm logins)
- SecureCRT
- Kermit 95
I've wanted to try and build OpenSSH using Microsoft's Services for
UNIX,
and then try and add SSPI support, but I don't have enough free time these
days.
--
Carson