Passing Kerberos TGT (ticket-granting ticket) to remote hosts with ssh

18/11/2009

Kerberos uses tickets to grant access to resources on a Kerberos-enabled computer. If you want to login (via SSH) to a remote host and you don’t want to re-execute the kinit command after you login, you can just forward your ticket with your ssh client. Two steps are needed to do this – given that your Kerberos client is configured:

  1. Create a Kerberos forwardable ticket to your machine
  2. and, forward your ticket while logging in to the remote machine.

In order to create a forwardable ticket execute kinit with the “-f” argument. e.g.:

pythoagoras:~ asteriosk$ kinit -f
Please enter the password for username@domain.com:

In order to tell the ssh client to forward your ticket to the remote machine, you have to configure it accordingly. The easiest way to do it is to include two directives in your ssh client configuration file which is in .ssh/config (create one if there its not there).

chercheurs2-235:~ asteriosk$ more ~/.ssh/config
Host domain.com
        GSSAPIAuthentication yes
        GSSAPIDelegateCredentials yes

Of course, substitute domain.com and username accordingly to match your configuration. This works for both Linux and Mac OS X clients.

There are 11 comments in this article:

  1. 19/10/2013the pirate bay music top 100 say:

    The two murdered troopers, Power and Cahill, were men from good Irish families.
    Have you played any gigs out and about, any house parties, any school dances.

    Good fishing ended up being to be had in this river all
    the year round, even during flood-time, then when
    the river was clear fish may be seen taking
    the bait at the depth of 10 feet.

  2. 19/01/2014torrents say:

    Secret shame is privately revisited again and again in an attempt to deal with all the pain, and becomes fertile
    ground for distorted beliefs highly arrested for a painful emotional tag.
    There is a new variety of download site where you can get not merely movies to your Iphone but games and music too,
    and all sorts of for free. The Bit – Torrent protocol basically lets people to upload and distribute aspects of a
    file with the same time.

  3. 27/01/2014Arlie say:

    Thanks for sharing your thoughts on karat gold.
    Regards

  4. 14/02/2014men's torrentshell jacket say:

    The download The Debt DVD rip that is certainly still standing can be
    an oddity. Not only does a digger know that it is quite possible
    he or she locate a great deal of gold with little or no trouble, but,
    worse still, he knows he may work very, very hard without getting
    any gold at all. Neighbours were few in number,
    where there were only three other women living inside neighbourhood – all lived in a choice of bark huts or tents making use of their young children.

  5. 8/04/2014peru travel safety say:

    Youre so cool! I dont suppose Ive read anything like this before.
    So nice too find somebody with some original thoughts on this subject.
    realy thank you foor starting this up. this website is something
    that is needed oon the web, someone with a little originality.
    useful job for bringing something new to thhe internet!

  6. 14/07/2014Men's monk-strap shoes say:

    Hello there! This is my first comment here so I just wanted to give
    a quick shout out and tell you I really enjoy reading through your articles.
    Can you recommend any other blogs/websites/forums that go over the same subjects?
    Appreciate it!

  7. 9/09/2014seo Checker say:

    Hello there! Do you use Twitter? I’d like to follow you if that would
    be ok. I’m undoubtedly enjoying your blog and look forward to new posts.

  8. 10/10/2014youtu.be say:

    I am regular reader, how are you everybody?
    This piece of writing posted at this web site is really good.

  9. 17/11/2014Appliance say:

    It’s difficult to find educated people for this subject, but you seem like you know what you’re talking about!
    Thanks

  10. 12/02/2015Facebook say:

    Legally Blond – a dvd download movie torrents with regards to a California
    sorority girl that will do anything to hold her man. My family and most of the people on our block were
    from Sicily, Italy. I have realized this website that offers free downloads of
    movie torrents at virtually no cost.

  11. 13/08/2015outdoor painters Mystic CT say:

    Superb blog! Do you have any tips for aspiring writers? I’m hoping
    to start my own website soon but I’m a little lost on everything.
    Would you advise starting with a free platform like WordPress or
    go for a paid option? There are so many options out there that I’m completely
    overwhelmed .. Any suggestions? Thank you!

Write a comment: