Eugeny / tabby

A terminal for a more modern age
https://tabby.sh
MIT License
59.21k stars 3.39k forks source link

SSH authentication using GSSAPI #5187

Open mojr13 opened 2 years ago

mojr13 commented 2 years ago

Is your feature request related to a problem? Please describe. I got quite used to putty using background kerberos authentification on Windows 10 on the background and me not having to input password. I really like tabby, and would like to have this feature. (I don't like storing passwords inside apps, due to security concerns and having to change the password in all apps, or managing the ssh keys. I liked the simplicity of kerberos authentification.)

Describe the solution you'd like Using single sign on to server.

Describe alternatives you've considered Storing passwords inside Tabby. Managing host keys for servers.

Additional context This is an example from putty log for authentication:

Using SSPI from SECUR32.DLL
Trying gssapi-with-mic...
Attempting GSSAPI authentication
GSSAPI authentication initialised
GSSAPI authentication initialised
GSSAPI authentication loop finished OK
Access granted
manuelblancovalentin commented 2 years ago

^^^^BUMP ON THIS!!

How should we setup tabby to allow GSSAPIAuthentication?

mwtrigg commented 2 years ago

This is, quite honestly, the capability lacking that prevents me from using this as my daily driver.

Le0nsec commented 2 years ago

Are there any updates?

Eugeny commented 2 years ago

Not yet.

joaompinto commented 2 years ago

I also need this but I have difficulty to ask or test it because it would required an SSHD server with Kerberos for testing. I only have this available at my job which is in a segregated network.

Is someone on this issue able to provide access to an sshd server just for the purpose of testing this feature ?

Thanks

manuelblancovalentin commented 2 years ago

@joaompinto I could, potentially.

joaompinto commented 2 years ago

Meanwhile did some research, Tabby uses nodejs ssh2 module, and according to https://github.com/mscdex/ssh2/issues/333 GSSAPI is still not supported there :(

frankgraave commented 2 years ago

When this is supported, I'm definitely making this my daily terminal. ❤️

joaompinto commented 2 years ago

By the way, you are aware that current Windows 10 openssh support Kerberos right ? Which means ssh -K servername from a Tabby clink promote might be sufficient :)

manuelblancovalentin commented 2 years ago

@joaompinto What about OSX? Any idea?

joaompinto commented 2 years ago

@manuelblancovalentin I do not have any OSX system, maybe you can try https://formulae.brew.sh/formula/openssh ?

Homebrew Formulae
openssh
Homebrew’s package index
ghost commented 1 year ago

Any progress?

hassan11196 commented 11 months ago

any updates on this?