[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-06-03 Thread John Hearns via FreeIPA-users
Noting that MobaXterm supports GSSAPI https://www.mobatek.net/ In the Settings/SSH you have a choice of SSH Library : Native Windows MIT Kerberos Custom Library On Fri, 31 May 2019 at 17:25, Alexander Bokovoy via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > On pe, 31

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-06-01 Thread John Keates via FreeIPA-users
On *nix I’d test with klist etc to get information on what tickets I have and what those tickets are good for. Perhaps you can do the same on Windows, figure out what tickets you actually have and what you can do with them. John > On 1 Jun 2019, at 13:04, lejeczek via FreeIPA-users > wrote:

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-06-01 Thread lejeczek via FreeIPA-users
On 31/05/2019 15:42, Juan Pablo wrote: > Hi, first of all: GSSAPI is not imported on openssh for windows > unfortunately. So you need to mandatory use putty to have GSSAPI > kerberos passwordless from windows to linux domain. > > second, from which system on the windows side are you trying to

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-05-31 Thread Alexander Bokovoy via FreeIPA-users
On pe, 31 touko 2019, Sumit Bose via FreeIPA-users wrote: On Fri, May 31, 2019 at 11:42:43AM -0300, Juan Pablo via FreeIPA-users wrote: Hi, first of all: GSSAPI is not imported on openssh for windows unfortunately. So you need to mandatory use putty to have GSSAPI kerberos passwordless from

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-05-31 Thread Sumit Bose via FreeIPA-users
On Fri, May 31, 2019 at 11:42:43AM -0300, Juan Pablo via FreeIPA-users wrote: > Hi, first of all: GSSAPI is not imported on openssh for windows > unfortunately. So you need to mandatory use putty to have GSSAPI kerberos > passwordless from windows to linux domain. Thanks, good to know. Is there a

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-05-31 Thread Juan Pablo via FreeIPA-users
Hi, first of all: GSSAPI is not imported on openssh for windows unfortunately. So you need to mandatory use putty to have GSSAPI kerberos passwordless from windows to linux domain. second, from which system on the windows side are you trying to login? can you see if it works from the Active

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-05-27 Thread Sumit Bose via FreeIPA-users
On Sun, May 26, 2019 at 01:42:32PM +0100, lejeczek via FreeIPA-users wrote: > On 23/05/2019 16:43, Sumit Bose via FreeIPA-users wrote: > > On Thu, May 23, 2019 at 04:17:08PM +0100, lejeczek via FreeIPA-users wrote: > >> On 23/05/2019 14:56, Rob Crittenden wrote: > >>> lejeczek via FreeIPA-users

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-05-26 Thread John Keates via FreeIPA-users
For this to work, yes you need to setup AD Trust, and for HBAC to access the Linux systems, you need ID View user overrides. Once you have verified basic password or ssh key login (set key in user override!) works, GSSAPI should be an easy next step. Keep in mind that if you were to kinit on a

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-05-26 Thread lejeczek via FreeIPA-users
On 23/05/2019 16:43, Sumit Bose via FreeIPA-users wrote: > On Thu, May 23, 2019 at 04:17:08PM +0100, lejeczek via FreeIPA-users wrote: >> On 23/05/2019 14:56, Rob Crittenden wrote: >>> lejeczek via FreeIPA-users wrote: hi guys, reading official guide one may assume - I do - that

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-05-23 Thread Sumit Bose via FreeIPA-users
On Thu, May 23, 2019 at 04:17:08PM +0100, lejeczek via FreeIPA-users wrote: > On 23/05/2019 14:56, Rob Crittenden wrote: > > lejeczek via FreeIPA-users wrote: > >> hi guys, > >> > >> reading official guide one may assume - I do - that "Using SSH Without > >> Passwords" should work out-of-box

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-05-23 Thread lejeczek via FreeIPA-users
On 23/05/2019 14:56, Rob Crittenden wrote: > lejeczek via FreeIPA-users wrote: >> hi guys, >> >> reading official guide one may assume - I do - that "Using SSH Without >> Passwords" should work out-of-box (centos 7.6) - is such assumption valid? >> >> For me this does not work - ssh still asks for

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-05-23 Thread Angus Clarke via FreeIPA-users
I suspect OP is enquiring about ssh keys. You need to tell your SSH client about your SSH private key (keep it safe) and paste the public component of your key pair into the SSH key field in the FreeIPA web admin screen for the user (the field is about a third of the way down the screen on the

[Freeipa-users] Re: Windows Integration - Using SSH Without Passwords

2019-05-23 Thread Rob Crittenden via FreeIPA-users
lejeczek via FreeIPA-users wrote: > hi guys, > > reading official guide one may assume - I do - that "Using SSH Without > Passwords" should work out-of-box (centos 7.6) - is such assumption valid? > > For me this does not work - ssh still asks for passwords. > > If this is due to some