search

PowerShell / Win32-OpenSSH

Win32 port of OpenSSH
7.36k stars 757 forks source link

Make win32-openssh compatible with AD auth via public key #2202

Open Nova-Logic opened 7 months ago

Nova-Logic commented 7 months ago

Summary of the new feature / enhancement

I am developing an API for managing windows hosts. due to lack of ability to auth on managed hosts via public key with proper AD net session it introduce a lot of pain for making job done, and also making management of win hosts from linux very hard, since a lot of PowerShell cmdlets rely on network session.

Proposed technical implementation details (optional)

Implement an win32-openssh plugin that would That would be beneficial for developers, who are trying to use System.management.automation and sshconnectioninfo since PowerShell core team does not support password or other forms of auth for the sshconnections that would be able to achieve that goal.

mgkuhn commented 7 months ago

What would this enable that isn't already enabled by the existing Kerberos/GSSAPI authentication support? (I routinely manage Windows hosts from Linux via GSSAPI authentication and delegation (ssh -K) and it works very well.)

Nova-Logic commented 3 months ago

@mgkuhn this would allow deploying API's in K8S that would make ssh connections to windows hosts and to get proper net sessions without any problems/complexities related to making krb5+gssapi+delegation work in a pod