26 lines
1.3 KiB
Markdown
26 lines
1.3 KiB
Markdown
# SSH Access from Windows using Putty
|
|
|
|
## Kerberos/AFS Failures with Default Settings
|
|
|
|
The default settings of Putty allow to connect to a Linux host. But when there are services depending on Kerberos like AFS then that will fail:
|
|
|
|
|
|
|
|
This is due to missing Kerberos ticket delegation. Note that you may recover from this on the Linux shell by entering `kinit` and then your password to opain a new Kerberos ticket and `aklog` to log into AFS.
|
|
|
|
## Disable Kerberos in Putty
|
|
|
|
To avoid this issue disable Kerberos in Putty. You will then need to enter your password, but that will setup Kerberos properly on the destination machine.
|
|
|
|
In the Putty settings select "Connection" -> "SSH" -> "Auth" -> "GSSAPI" and there remove all ticks.
|
|
|
|
|
|
|
|
## Kerberos Details for Long Running Programs/Simulations
|
|
Kerberos tickets get invalid at some point after AFS will refuse access.
|
|
|
|
To check when this will be run `klist` and in the output check below `krbtgt/D.PSI.CH@D.PSI.CH` the `renew until` timestamp.
|
|
To seamlessly continue you need to obtain a new Kerberos ticket before by running `kinit`.
|
|
It will then ask your password and after sucessful authentication there will be a newly acquired Kerberos ticket which will do it for one week and AFS is happy as long too.
|
|
|