[27261] in Kerberos
Re: putty/winscp with gssapi/krb5 ticket forwarding
daemon@ATHENA.MIT.EDU (Christopher D. Clausen)
Thu Jan 25 11:16:07 2007
Message-ID: <0b8501c7409c$0fa5abe0$0100a8c0@CDCHOME>
From: "Christopher D. Clausen" <cclausen@acm.org>
To: "Lars Schimmer" <l.schimmer@cgv.tugraz.at>, <kerberos@mit.edu>
Date: Thu, 25 Jan 2007 10:15:38 -0600
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Lars Schimmer <l.schimmer@cgv.tugraz.at> wrote:
> After some testing I got a few test PCs with debians "etch" system do
> ticket forwarding and obtaining afs tokens.
> Now I want to use putty and winscp from windows to login without a
> password on that machines.
> WinSCP can use gssapi login per default. But where do I have to put
> the krb5.keytab generated for the windows machine? In which directory
> do I have to put it?
Generally you don't want to use keytabs for users. You want to forward
the user's kerberos credentials in their ccache.
If your systems are on Windows AD, you might need to run ms2mit.exe
first and then try to forward credentials with GSSAPI apps that use MIT
Kerberos for Windows.
If you do need a keytab, you can put it anywhere, just kinit -kt
keytab.file princial@REALM before attempting to use it.
<<CDC
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
