Re: openssh + kerberos + windows ad



Bob,

What exactly you want to know? :)



On Mon, Jan 4, 2010 at 9:18 PM, Bob Rasmussen <ras@xxxxxxxxx> wrote:
I am attempting the same thing myself, almost. Please provide as many
details as you can.

My AD server is a 2008 Server box, my client is a Windows 2000 box, trying
to use Windows PuTTY to log in to a Linux box that is running OpenSSH.

I also am running WireShark (formerly Ethereal) to monitor the network, so
I can see Kerberos transactions - those that work and those that fail.

The PuTTY I am trying is, I think, an unreleased version from the official
website. It has calls to GSSAPI.

At this point I get messages about an illegal flag being set. I see these
in WireShark.

I'd appreciate any help.

On Mon, 4 Jan 2010, Marcello Mezzanotti wrote:

I just did :)

the problem was the keytab, i created using linux command "net ads
keytab create",

i tested both linux ssh client and putty
(PuTTY-0.58-GSSAPI-2005-07-24, i tested with another patched putty
client, worked, but it didnt created/forwared my ticket) and all
worked fine.

Is "Kerberos for Windows" necessary for Windows/Putty?

Thank you all for help.

Thank you,
Marcello

--
Marcello Mezzanotti <marcello.mezzanotti@xxxxxxxxx>
http://blogdomarcello.wordpress.com
Information Security
UNIX / Linux / *BSD



Regards,
....Bob Rasmussen,   President,   Rasmussen Software, Inc.

personal e-mail: ras@xxxxxxxxx
 company e-mail: rsi@xxxxxxxxx
         voice: (US) 503-624-0360 (9:00-6:00 Pacific Time)
           fax: (US) 503-624-0760
           web: http://www.anzio.com
 street address: Rasmussen Software, Inc.
                10240 SW Nimbus, Suite L9
                Portland, OR  97223  USA




--
Marcello Mezzanotti <marcello.mezzanotti@xxxxxxxxx>
http://blogdomarcello.wordpress.com
Information Security
UNIX / Linux / *BSD



Relevant Pages

  • Re: Future of IT in Lebanon
    ... It's the same Linux code base. ... Microsoft Office on a Windows server, it will install and run fine, the main ...
    (soc.culture.lebanon)
  • RE: Printing from Win9x clients stops
    ... Open Server Management. ... then right-click the name of the computer running Windows Small Business ... >From the client computer: ... The Select Network Component Type ...
    (microsoft.public.windows.server.sbs)
  • Re: Question about Red Hat Linux Enterprise
    ... we have is running Windows 2000 Server ... Luckily running Apache + MySQL on a Linux system is not a lot ... MySQL database and injecting it back into the MySQL installation ...
    (comp.os.linux.networking)
  • Re: Sweet Success
    ... Let's continue to assume that I prefer Windows to anything else: ... neither Linux nor Windows may be the answer. ... While it may well be initially less expensive to install a Linux-based ... of Linux simultaneously, along with Windows Server, AIX, and OS/400. ...
    (RedHat)
  • Re: [Full-disclosure] 70 million computers are using Windows 98 right now
    ... Linux is definitely not a natural migration pathway. ... Windows 2000, Windows XP, and Mac OS X seem to work pretty ... > desktop to server. ... But then the persons across the sea just can't install ...
    (Full-Disclosure)