DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:date:message-id:subject:from:to
	:content-type; q=dns; s=default; b=uO606zpMo+uR0FzfSJbrCdXSUQDQQ
	Q9OXJ3n2U6z7FF4n9BwYzuDu0EStcz05riNnpHmrVmiTNvFxlKBvfFXpAYnvi9IS
	NqtP7Ih7C9vy39PUYPr49SK7njzUShwpNlFZUJpV0US8WdSG9cnJzsv8YeZRNTbd
	7bH6L9gT97RTXw=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
MIME-Version: 1.0
Date: Tue, 22 Jul 2014 18:10:33 +0200
Message-ID: <CA+rGx5eOccJkBmza9nueiMS-6Zaig9CSKQ4xvudGEqSm1aC-RQ@mail.gmail.com>
Subject: cygwin ssh, sspi, gssapi
From: Thomas Schweikle <tschweikle AT gmail DOT com>
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=UTF-8

Hi!

After looking arround for informations about cygwin supporting Windows
SSPI interface I found various informations telling it does, but a lot
of others stating it does not.
Now I am a but confused.
Does cygwin support SSPI directly?
Does it support SSPI via external libraries -- some say I have to
install heimdal (http://computing.help.inf.ed.ac.uk/kerberos-windows)
for 64-bit Windows, then Identity-Manager from
(https://www.secure-endpoints.com/netidmgr/v2//) to have ssh use
Windows build in kerberos support.

With Identity-Manager I can now watch the tickets I have, but -- ssh
from cygwin states it could not find any ticket connecting to an
kerberos enabled ssh-server. From Linux this works seamlessly. On
Windows I can connect, but I have to enter my password again :-(

debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup gssapi-with-mic
debug3: remaining preferred: publickey,keyboard-interactive,password
debug3: authmethod_is_enabled gssapi-with-mic
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure.  Minor code may provide more information
No Kerberos credentials available

debug1: Unspecified GSS failure.  Minor code may provide more information
No Kerberos credentials available

debug1: Unspecified GSS failure.  Minor code may provide more information

debug1: Unspecified GSS failure.  Minor code may provide more information
No Kerberos credentials available

debug2: we did not send a packet, disable method

The heimdal packages available for 64-bit cygwin seem not to have
klist and friends available, but the libraries. SSH seems to use them,
but do these libraries connect to SSPI or do they depend on some other
infrastructure?

If one could shed some light on this I'd be really happy!

-- 
Thomas

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple