Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)


Topic review


Re: SFTP site login without giving credentials - Using GSSAPI32.

Once again, does your server support the Kerberos/GSSAPI authentication at all? It's not common. Without that, there's no point checking further.

It seems that you actually just randomly picked Kerberos/GSSAPI authentication as a way to automate authentication. If that's true, you better look at the public key authentication.

SFTP site login without giving credentials - Using GSSAPI32.

Hi Martin

I do think GSSAPI authentication is properly enabled for my specific user(Please look the capture).
Somehow I read the log as if the GSSAPI32 module was not loaded? At least that was why I downloaded the GSSAPI32.DLL(whole package) from MIT. Because I thought it was needed.
Try agent: Yes; Agent forwarding: No; TIS/CryptoCard: No; KI: Yes; GSSAPI: Yes
. 2021-12-14 GSSAPI: KEX: No; Forwarding: No; Libs: gssapi32,sspi,custom; Custom:
. 2021-12-14 Ciphers: aes,chacha20,blowfish,3des,WARN,arcfour,des; Ssh2DES: No
. 2021-12-14 KEX: ecdh,dh-gex-sha1,dh-group14-sha1,rsa,WARN,dh-group1-sha1
. 2021-12-14 SSH Bugs: Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto,Auto

I'm testing on my own computer with my domain user account.

Re: SFTP site login without giving credentials - Using GSSAPI32.

So does your SFTP server/account have GSSAPI authentication enabled?
Is it set up locally on your machine? (I have no experience with this part).
There's nothing you need to set up in WinSCP for this. WinSCP has GSSAPI authentication enabled by default.

SFTP site login without giving credentials - Using GSSAPI32.

I'd been looking for a way logging on to a SFTP site without actually giving credentials (using Windows domain credentials).

That would be useful when running a script.

I've read that it should somewhat be possible via MIT's GSSAPI32 library. Which I got already.

So far I haven't been able to find the documentation I need in order to make it work. Obviously I'm not doing it right.

If someone has been able to make it work and want to share. That would be great.