How to configure PuTTY to use Windows Kerberos ticket?

Our network uses Active Directory (duh) and all end-user accounts are in AD (not local). I'm trying to configure PuTTY to use the ticket I obtain automatically, when logging into my Windows workstation, to login into Linux servers as well.

I added the into the ~/.k5login of the Linux account.

I verified, that it works by:

  1. Doing kinit inside a FreeBSD VM running on the Windows workstation.
  2. Successfully logging-in via ssh (with both PublicKey and Password authentication methods disabled).

I then configured PuTTY -- the GSSAPI section -- thus:

PuTTY's Connection/SSH/Auth/GSSAPI configuration screen

and attempted to login to the same Linux server as the same account. To no avail -- I'm still prompted for password.

What am I missing? (I don't have root-access on the Linux system, and am unable to view sshd's logs.)

Invoking klist (C:\Windows\System32\klist.exe) on a PowerShell prompt lists plenty of tickets.

However, trying to use plink -v from command-line (as advised by @user1686), I see the message "No GSSAPI security context available" followed by "GSSAPI authentication initialization failed".

Trying to use the server's FQDN does not change the result, but plink no longer shows errors -- still falls back to asking for password, though:

...
Trying SSPI from SECUR32.DLL
Trying gssapi-with-mic...
Attempting GSSAPI authentication
GSSAPI authentication initialised
GSSAPI authentication initialised
GSSAPI authentication loop finished OK
me@F.Q.D.N's password:
12 Reset to default

Know someone who can answer? Share a link to this question via email, Twitter, or Facebook.

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password

Post as a guest

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

You Might Also Like