OpenSSH 4.3p2, MIT KfW 3.0 and Cygwin

[Carson Gaspar]

--On Wednesday, April 12, 2006 2:26 PM -0700 Dan Peterson 
<petesea at bigfoot.com> wrote:

> The GOAL is a GSSAPI enabled ssh client (preferably with gssapi-keyex
> support) that uses the nice GUI front-end provided by KfW.  Those windows
> users get too confused if you tell them they have to go to the command
> prompt and run "kinit" every morning.

FYI if you use the native SSPI, your tickets are refreshed every time you 
unlock your screen. Of course SSPI presumes you either use your AD servers 
as your KDCs for all systems, or that you have a trust relationship between 
the realms. There are at least 3 SSPI SSH clients I know of:

- patched PuTTY (2 different versions exist, but only one allows you 
specify the host principal, which is required for x-realm logins)
- SecureCRT
- Kermit 95

I've wanted to try and build OpenSSH using Microsoft's Services for UNIX, 
and then try and add SSPI support, but I don't have enough free time these 
days.

-- 
Carson