Connection with Kerberos
Xshell 7 supports MIT GSSAPI Kerberos and Microsoft's SSPI Kerberos authentication. This article assumes that you have a working Kerberos server and client.
To create a new Kerberos session,
- Select [New] from the [File] menu.
- Enter a session name in [Name].
- Select SSH from the [Protocols] list.
- Enter a host name in [Host]
- Select [Authentication] from under [Category].
- Select GSSAPI from the [Method] list.
- Note
If the PC running Xshell is utilizing an Xshell supported Kerberos module, Xshell can only automatically authenticate to the SSH server if GSSAPI authentication is selected.
- Note
- To change the GSSAPI settings, click the [Setup] button.
- Note
To connect to another server using Kerberos authentication from a server using Kerberos authentication, select the 'Allow GSSAPI credential delegation' option.
- Note
- Click [OK] to save the GSSAPI settings.
- Enter the user name.
- Click [OK] to save the session file.
- Click [Connect] to connect immediately or select the session file from the Sessions Dialog Box to connect.
You have finished creating a session that will use the Kerberos module. When this session opens, it will try to use the Kerberos credential for the specified user. It has to be the same user you defined in the Network Identity Manager.