tabby SSH authentication using GSSAPI

Is your feature request related to a problem? Please describe. I got quite used to putty using background kerberos authentification on Windows 10 on the background and me not having to input password. I really like tabby, and would like to have this feature. (I don't like storing passwords inside apps, due to security concerns and having to change the password in all apps, or managing the ssh keys. I liked the simplicity of kerberos authentification.)

Describe the solution you'd like Using single sign on to server.

Describe alternatives you've considered Storing passwords inside Tabby. Managing host keys for servers.

Additional context This is an example from putty log for authentication:

Using SSPI from SECUR32.DLL
Trying gssapi-with-mic...
Attempting GSSAPI authentication
GSSAPI authentication initialised
GSSAPI authentication initialised
GSSAPI authentication loop finished OK
Access granted

Dec 16 '21 12:12 mojr13

^^^^BUMP ON THIS!!

How should we setup tabby to allow GSSAPIAuthentication?

Dec 26 '21 23:12 manuelblancovalentin

This is, quite honestly, the capability lacking that prevents me from using this as my daily driver.

Apr 23 '22 03:04 mwtrigg

Are there any updates?

May 18 '22 03:05 Le0nsec

Not yet.

May 18 '22 06:05 Eugeny

I also need this but I have difficulty to ask or test it because it would required an SSHD server with Kerberos for testing. I only have this available at my job which is in a segregated network.

Is someone on this issue able to provide access to an sshd server just for the purpose of testing this feature ?

Thanks

Jun 11 '22 07:06 joaompinto

@joaompinto I could, potentially.

Jun 12 '22 02:06 manuelblancovalentin

Meanwhile did some research, Tabby uses nodejs ssh2 module, and according to https://github.com/mscdex/ssh2/issues/333 GSSAPI is still not supported there :(

Jun 12 '22 04:06 joaompinto

When this is supported, I'm definitely making this my daily terminal. ❤️

Jun 15 '22 14:06 frankgraave

By the way, you are aware that current Windows 10 openssh support Kerberos right ? Which means ssh -K servername from a Tabby clink promote might be sufficient :)

Jun 15 '22 17:06 joaompinto

@joaompinto What about OSX? Any idea?

Jun 15 '22 20:06 manuelblancovalentin

@manuelblancovalentin I do not have any OSX system, maybe you can try https://formulae.brew.sh/formula/openssh ?