Your best friend for file transfer.

Fetch application logoFetch

SFTp and Kerberos support? (6 posts)

  • Started 8 years ago by Allan
  • Latest reply 8 years ago from Scott McGuire
  • Allan Member

    Does Fetch have SFTP with Kerberos support? It seems that Fetch can connect with FTP and kerberos, and with SFTP, but not with both.

    A combination of SFTP and Kerberos seems to me to be the logical choice for the security conscious. Any chance of getting SFTP/Kerberos support in the near future?

    Thanks,

    Allan

    [This message has been edited by Allan (edited 12-12-2005).]

    Posted 8 years ago #

  • Scott McGuire Administrator

    Hi Allan,

    While Fetch does not have an explicit setting for SFTP with Kerberos, if your server is configured to use SSH with Kerberos v5 (GSSAPI), Fetch should use Kerberos when you choose SFTP and connect to that server. Just leave the password blank to use your Kerberos tickets instead.

    However, for a variety of reasons, if you do not already have Kerberos tickets and leave your password blank when choosing SFTP, Fetch will not show you the Kerberos authentication dialog to get tickets. We hope to address that some time in the future.

    Thanks,

    Scott McGuire
    Fetch Softworks

    Posted 8 years ago #

  • Allan Member

    Unfortunately this is not happening. I have a ticket and attempt an SFTP to a server that accepts tickets. After hitting connect, Fetch asks for a password (it didn't use the ticket).

    Posted 8 years ago #

  • Scott McGuire Administrator

    Hi Allan,

    Sorry, it turns out there is a bug in how we handle SFTP connections when you don't provide a password that makes Fetch ask you for a password again. When Fetch prompts you for your password the extra time, just leave your password blank again and click on OK. Then it really should use your Kerberos tickets. Let us know if that doesn't work, and we'll gather some debugging information.

    If leaving your password blank in the extra prompt does work, you can work around the extra prompt by doing the following:

    * Connect again, leaving your password blank.
    * When the password prompt comes up, leave the password blank again, but this time, click the "Add password to keychain" checkbox. Click on OK.

    From now on, you should not get the second password prompt when you try to connect via SFTP and have Kerberos tickets. An empty password for the server is stored in your keychain, so your Kerberos password is not at risk. When Fetch gets the empty password out of the keychain, it will know to use your tickets instead.

    Sorry for the extra steps.

    Thanks,

    Scott McGuire
    Fetch Softworks

    Posted 8 years ago #

  • Allan Member

    your suggestion worked. thanks. Hopefully you can fix the bug for the next release.

    -Allan

    Posted 8 years ago #

  • Scott McGuire Administrator

    Hi Allan,

    It may not be in the next release, but it's definitely on our to-do list.

    Thanks,

    Scott McGuire
    Fetch Softworks

    Posted 8 years ago #

Reply

  • Or nickname, if you prefer.
  • This will be kept confidential.
  • This is to ensure that you’re a person, not a spambot.