DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:date:message-id:subject:from:to
	:content-type; q=dns; s=default; b=p6wAW6HcrH2R3y8x1GbblwNZSeoEq
	WYHVs2mQmx4wmfGPgAVj6Oh1bSOWWCV/BYHHJnAO9TCD7s0HITEQOlCIbBfY9EPG
	RsPo0iPL1MFZhrMLueRb12S3HTlCTZ/2AZ6zsjtc0kouCb0mHBJ48NeqbMGtW/eF
	nrPnlyEm2KCLOY=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
MIME-Version: 1.0
Date: Wed, 18 Sep 2013 15:55:36 +0200
Message-ID: <CAJ1BO=UK-Pe8_4QkUb1g0m4ti94sqUwmC-4M90J3zYwCccn87g@mail.gmail.com>
Subject: GSSAPI authentication and OpenSSH on Windows
From: =?ISO-8859-1?Q?Alf_H=E5kansson?= <alf DOT hakansson AT foxt DOT com>
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=ISO-8859-1

Hello!

I am trying to get Kerberos authentication to work with openssh on a
Windows machine that is part of a windows domain.
I have read all I could find on the internet about this issue but no
one seems to have succeeded.

OpenSSH is built with the Heimdal package.

There is a post that pretty well describes all the steps to take to
get it to work (but it does not)
http://cygwin.org/ml/cygwin/2013-08/msg00386.html
As I subscribed after that post I have no idea how to reply to it.

The problem occurs when I am making the keytab file with help of ktpass.exe.
 I need the principal HOST/myhost.whatever.com
Thing is that the machine itself is already registered with that
principal and as the Domain Controler only can have one entry for that
principal the machine will be deregistered and you can no longer logon
with a domain user to the console.

So please if anyone has any experience in this topic let me know!

/Alf

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple