openssh + kerberos + windows ad

2010-01-04 Thread Marcello Mezzanotti
ard-interactive debug2: we did not send a packet, disable method anyone could help me? another question, i downloaded a lot of patched putty clients with gssapi support (to use on windows machines), what is the correct one? thank you, Marcello -- Marcello Mezzanotti http://blogdomarcello.wordp

Re: openssh + kerberos + windows ad

2010-01-04 Thread Marcello Mezzanotti
machine, I configured /etc/ssh/ssh_config with: > > GSSAPIKeyExchange yes > GSSAPITrustDNS yes > GSSAPIAuthentication yes > GSSAPIDelegateCredentials yes > > I hope this will help you a bit. If not, please post the configuration of > both the ssh-server and the ssh-client and

Re: openssh + kerberos + windows ad

2010-01-04 Thread Marcello Mezzanotti
#kerberos IRC channel on Freenode if you > would like some interactive help in getting this to work. > > < > Marcello Mezzanotti wrote: >> >> Hans, >> >> Thaks for your help,  my sshd_config options match yours, sshd_config >> doesnt recognises GSSAPIKeyE

Re: openssh + kerberos + windows ad

2010-01-04 Thread Marcello Mezzanotti
04), but take into account. > >> mmezzano...@os112:~> ssh -vvv mmezzano...@os112.vmwarelab.int >> > > Try adding 'debug' to all pam.d lines on kerberos. That will produce a > much less verbose and hopefully more useful info. > -- Marcello Mezzanotti http://b

Re: openssh + kerberos + windows ad

2010-01-04 Thread Marcello Mezzanotti
"Kerberos for Windows" necessary for Windows/Putty? Thank you all for help. Thank you, Marcello -- Marcello Mezzanotti http://blogdomarcello.wordpress.com Information Security UNIX / Linux / *BSD Kerberos mailing list Ke

Re: openssh + kerberos + windows ad

2010-01-04 Thread Marcello Mezzanotti
Nikolay, i just got ticket with putty 0.58 patched (the one i mentioned earlier) the others one i can login but i dont get any ticket. On Mon, Jan 4, 2010 at 7:26 PM, Nikolay Shopik wrote: > On 04.01.2010 21:17, Marcello Mezzanotti wrote: >> Is "Kerberos for Windows" necessar

Re: openssh + kerberos + windows ad

2010-01-06 Thread Marcello Mezzanotti
ficial > website. It has calls to GSSAPI. > > At this point I get messages about an illegal flag being set. I see these > in WireShark. > > I'd appreciate any help. > > On Mon, 4 Jan 2010, Marcello Mezzanotti wrote: > >> I just did :) >> >> the

Re: openssh + kerberos + windows ad

2010-01-06 Thread Marcello Mezzanotti
Bob, On Wed, Jan 6, 2010 at 12:30 PM, Bob Rasmussen wrote: > On Wed, 6 Jan 2010, Marcello Mezzanotti wrote: > >> Bob, >> >> What exactly you want to know? :) > > 1) What version(s) of PuTTY work in your environment? Did you try the > developer's bui