1.3 KiB
SSH Access from Windows using Putty
Kerberos/AFS Failures with Default Settings
The default settings of Putty allow to connect to a Linux host. But when there are services depending on Kerberos like AFS then that will fail:
This is due to missing Kerberos ticket delegation. Note that you may recover from this on the Linux shell by entering kinit and then your password to opain a new Kerberos ticket and aklog to log into AFS.
Disable Kerberos in Putty
To avoid this issue disable Kerberos in Putty. You will then need to enter your password, but that will setup Kerberos properly on the destination machine.
In the Putty settings select "Connection" -> "SSH" -> "Auth" -> "GSSAPI" and there remove all ticks.
Kerberos Details for Long Running Programs/Simulations
Kerberos tickets get invalid at some point after AFS will refuse access.
To check when this will be run klist and in the output check below krbtgt/D.PSI.CH@D.PSI.CH the renew until timestamp.
To seamlessly continue you need to obtain a new Kerberos ticket before by running kinit.
It will then ask your password and after sucessful authentication there will be a newly acquired Kerberos ticket which will do it for one week and AFS is happy as long too.