cyberduck
cyberduck copied to clipboard
iterate-ch
Kerberos Support
cf74e60 created the issue
I think it would be awesome if Cyberduck had Kerberos support for Single Signon. Mac OS X Server has Kerberized FTP support, yet there are no FTP clients that I know of that support Kerberos.
anonymous commented
I know that a certain large university has evaluated including Cyberduck in their standard applications and the only roadblock was that there was no Kerberos support. It is a make-or-break feature for them.
anonymous commented
Please - this is a feature that would lead to more educational institutions adopting (and happily donating for) your wonderful product. With all the effort made by institutional IT dept to embrace either Microsoft Active Directory or another Directory Service that uses Kerberos, it is a shame to have applications that do not take advantage of all the benefits single sign-on offers. Apple has kerberized many, many services (including FTP, as noted, but WebDAV as well) in the Finder. I know my institution would love to use Cyberduck but the roadblock is lack of kerberization!
bryan underscore gucwa at fitnyc dot edu
@dkocher commented
Replying to [comment:5 anonymous]:
Please - this is a feature that would lead to more educational institutions adopting (and happily donating for) your wonderful product. With all the effort made by institutional IT dept to embrace either Microsoft Active Directory or another Directory Service that uses Kerberos, it is a shame to have applications that do not take advantage of all the benefits single sign-on offers. Apple has kerberized many, many services (including FTP, as noted, but WebDAV as well) in the Finder. I know my institution would love to use Cyberduck but the roadblock is lack of kerberization!
bryan underscore gucwa at fitnyc dot edu
I have no experience with Kerberos and no system to my availability for testing but I would welcome a patch. There would both be the option to implement this using the native MIT Kerberos API or using Java GSSAPI.
cb2977e commented
I'd be happy to setup a kerberized server for testing. Please email me for more details.
@dkocher commented
Registered SPNEGO and KERBEROS authentication schemes for use with WebDAV connections in c50c5cf586ee809ae515e9e0d3d91333acc17a1b.
@dkocher commented
Connection to SFTP servers with GSSAPIAuthentication enabled should just work.
@dkocher commented
Replying to [comment:10 cpcd]:
I'd be happy to setup a kerberized server for testing. Please email me for more details. Can you please write to mailto:[email protected] if this option is still current.
@dkocher commented
We will focus to bring support for SSH connections. For example, MIT has deprecated GSSAPI FTP End Of Life for Kerberized FTP (GSSAPI FTP) .