OpenSSH 4.3p2, MIT KfW 3.0 and Cygwin

Carson Gaspar carson at
Thu Apr 13 13:44:13 EST 2006

--On Wednesday, April 12, 2006 2:26 PM -0700 Dan Peterson 
<petesea at> wrote:

> The GOAL is a GSSAPI enabled ssh client (preferably with gssapi-keyex
> support) that uses the nice GUI front-end provided by KfW.  Those windows
> users get too confused if you tell them they have to go to the command
> prompt and run "kinit" every morning.

FYI if you use the native SSPI, your tickets are refreshed every time you 
unlock your screen. Of course SSPI presumes you either use your AD servers 
as your KDCs for all systems, or that you have a trust relationship between 
the realms. There are at least 3 SSPI SSH clients I know of:

- patched PuTTY (2 different versions exist, but only one allows you 
specify the host principal, which is required for x-realm logins)
- SecureCRT
- Kermit 95

I've wanted to try and build OpenSSH using Microsoft's Services for UNIX, 
and then try and add SSPI support, but I don't have enough free time these 


More information about the openssh-unix-dev mailing list