Differences
This shows you the differences between the selected revisions of the page.
2005-01-19 | 2005-01-21 | ||
subchapters (martin) | gssapi by vaclav tomec (martin) | ||
Line 19: | Line 19: | ||
===== Attempt MIT Kerberos GSSAPI authentication ===== | ===== Attempt MIT Kerberos GSSAPI authentication ===== | ||
- | The switch tells WinSCP to attempt Kerberos authentication. To use the Kerberos authentication you need to have [[&url(kerberosforwin)|Kerberos for Windows]] installed. | + | The switch tells WinSCP to attempt Kerberos authentication. |
+ | |||
+ | The GSSAPI is a generic API for doing client-server authentication. The | ||
+ | motivation behind it is that every security system has its own API, and the | ||
+ | effort involved with adding different security systems to applications is | ||
+ | extremely difficult with the variance between security APIs. However, with a | ||
+ | common API, application vendors could use the generic API and it could | ||
+ | work with any number of security platforms (Kerberos, Entrust, ...). | ||
+ | |||
+ | Currently, only MIT Kerberos 5 implementation of GSSAPI is supported. | ||
+ | |||
+ | The support of SSPI (Microsoft specific implementation of GSSAPI) is under development. | ||
+ | |||
+ | To use this authentication, you need to have [[&url(kerberosforwin)|Kerberos for Windows]] installed. | ||
===== Allow agent forwarding ===== | ===== Allow agent forwarding ===== | ||
This option allows the SSH server to open forwarded connections back to your local copy of Pageant. If you are not running Pageant, this option will do nothing. Learn more about [[&url(puttyagentfwd)|agent forwarding]]. ((&puttydoccite)) | This option allows the SSH server to open forwarded connections back to your local copy of Pageant. If you are not running Pageant, this option will do nothing. Learn more about [[&url(puttyagentfwd)|agent forwarding]]. ((&puttydoccite)) |