1. Home

Product groups

Support

  

kerberos auth + different realm (wodSSH / wodSSH.NET)

by pavel @, (5561 days ago)

Hello,
We are testing your library with gssapi authentication. The first test are positive but one our server needs different realm (other than used by default) specified in order to authenticate.
How we can specify that using your library?


locked

Re: kerberos auth + different realm

by wodDamir @, (5561 days ago) @ pavel

Pavel,

Can you do that in i.e. Putty? If so, how do you specify the Realm there? Can you perhaps provide us an example of that process?

Regards,
Damba

locked

Re: kerberos auth + different realm

by Pavel, (5558 days ago) @ wodDamir

Pavel,

Can you do that in i.e. Putty? If so, how do you specify the Realm there? Can you perhaps provide us an example of that process?

Regards,
Damba

Sorry for the delay.
Yes, it is possible to specify realm in the Putty.
Typical usage:
Your domain is local.net but server with service you are trying to connect is in different domain service.net
Using component it is possible to query ticket for local.net but not for service.net and the authentication fails.

Pavel

locked

Re: kerberos auth + different realm

by Jasmine, (5558 days ago) @ Pavel

Pavel,

I only see Service principal name in Putty. Is this what you're referring to?

Currently wodSSH automatically takes it from the hostname if I remember correctly.

Kreso

locked

Re: kerberos auth + different realm

by Pavel, (5558 days ago) @ Jasmine

No, alhough it can also be usefull.
Our version of Putty has such option (in ssh/auth):
http://www.nlm.cz/files/PuttySSO.zip

Pavel

locked

Re: kerberos auth + different realm

by Jasmine, (5558 days ago) @ Pavel

Pavel,

I will try to find source for your version of Putty to see what is this all about and how Putty handles it. I'll get back to you in 1-2 days.

Kreso

locked

Re: kerberos auth + different realm

by Jasmine, (5555 days ago) @ Jasmine

Pavel,

from what I've read, realm is taken from domain name, or part of full hostname. Did you try to reference that host using different hostname+domain?

Kreso

locked

Re: kerberos auth + different realm

by Pavel, (5552 days ago) @ Jasmine

Pavel,

from what I've read, realm is taken from domain name, or part of full hostname. Did you try to reference that host using different hostname+domain?

Kreso

Yes,
using different host with domain has no effect, the component still tries to authenticate with the actual domain name.

locked

Re: kerberos auth + different realm

by Jasmine, (5552 days ago) @ Pavel

Pavel,

I can only think that what you refer is 1st argument in AcquireCredentialsHandle call. Perhaps we can try it out?

Can you please send email to techsupport@weonlydo.com and I'll send you back the DLL with hardcoded different realm. So, if that works and authenticates, we can then make more general version.

Would that be ok?

Kreso

locked

Re: kerberos auth + different realm

by Jasmine, (5548 days ago) @ Jasmine

Pavel,

hi. I may have found what you need, but I can't test it. If you're interested please send us email.

Regards,
Kreso

locked

Re: kerberos auth + different realm

by Pavel, (5546 days ago) @ Jasmine

Pavel,

hi. I may have found what you need, but I can't test it. If you're interested please send us email.

Regards,
Kreso

Hello,
I'm still interested, email send to techsupport.

Pavel

locked

...with the SFTP interface you produced, everything was so simple to understand, we were able to start coding almost immediately!

Zack Menendez
Mapframe Corporation

...wodFtpDlx was exactly what I needed, it worked, and it was priced right...

David Keenan
Serengeti Systems Incorporated

It was no small factor, however, that your support in getting me up and running made me buy from you.

Charles Taylor
InterWeave, Inc.

Thank you for the great customer service ... I am really impressed with the wodSSH ActiveX control.

Andrew Ross
Kiwi Enterprises

...your service has been phenomenal. It's always quick and you are there when I need you.

James Newman
Castleberry Investments

Your .NET components allow us to blend .NET technology seamlessly with secure communication, and with excellent technical support.

Bil Bragg
Dionach

I've heard that you are amazing with your replies coming back so quickly - and now I've seen the speed in which you reply first hand.

Andrew Narracott
Sun Computer Consultancy

The people at WeOnlyDo are amazing! ... I always get a super fast response from customer service, and the products are great too. Thanks WeOnlyDo

Jeff Hall
Occupational Health Research

Count us as a satisfied WeOnlyDo customer. We appreciate your terrific support to get the secure Telnet working properly.

Don Fitzpatrick
InterNetworx Systems

Congratulations on an excellent product and first rate support!

Sander Pool
Rhapsody Networks