Accessing Kerberized Machines (Community-Supported Methods)

Intended for: Kerberos users

Scenario/Use case:

This article describers how to access systems in the FNAL.GOV realm from UNIX, Linux, Windows and Mac machines using programs or operating systems not supported by the Computing Sector.

Instructions:

Very important note: Any time you're about to enter your Kerberos password, first verify that you're using the host's directly-connected keyboard or using an encrypted network connection! Otherwise you risk exposing your password. See Encrypted vs. Unencrypted Connections for information.

Using Kerberized Client Software on Windows

SSH Connections Using the PuTTY Terminal Emulator

PuTTY is a terminal emulator program which supports Kerberized ssh.   The PuTTY package also includes the command line programs plink, pscp, and psftp. These are similar to the Linux ssh (when used to execute a command a remote system),  scp , and  sftp  commands.

1. Start the PuTTY application.  The PuTTY Configuration window will appear.
2. In the Session section, type your destination hostname in the Host Name box.  You can also type username@hostname if you are logging in as a different user.
3. Click the Open button to log in.  If you don't already have a valid Kerberos ticket, a dialog will pop up asking for your Kerberos username and password.
4. You can also enter a name in the Saved Sessions box and click the Save button for future use.  To use a saved session, click on the session name in the Saved Sessions list to select and then click on the Load and then the Open buttons.

File Transfers Using WinSCP

WinSCP is a GUI file transfer client which supports the SCP and SFTP protocols.

1. Start WinSCP. The WinSCP Login window will appear.
2. Select the Named Site item on the left or type your destinatino host in the Host name: box
3. Click the Login button to log in. 

See Also:

• Strong Authentication at Fermilab