OpenSSH Authentication using Kerberos
An interesting paper on how to authenticate against Active Directory using Kerberos and OpenSSH. This will enable SSO capabilities between Linux and windows, if used in combination with an Kerberos enabled SSH. And maybe even 2-factor authentication if combined with smartcards, haven’t tested this but should be working in theory if you use an SSH client from windows at least.
Components used:
On linux:
- openssh
- openssh-server
- samba-common
- samba-client
- krb5-workstation
- krb5-libs
On Windows:
- Windows Support Tools
OpenSSH on Linux using Windows/Kerberos for Authentication
Categories: Active Directory, Interoperability, Security, Unix Active Directory, kerberos, linux, putty, ssh, Windows