Fetch Softworks

SFTp and Kerberos support? (6 posts)

• Started 18 years ago by Allan
• Latest reply 18 years ago from Scott McGuire

• Allan Member

  Does Fetch have SFTP with Kerberos support? It seems that Fetch can connect with FTP and kerberos, and with SFTP, but not with both.

  A combination of SFTP and Kerberos seems to me to be the logical choice for the security conscious. Any chance of getting SFTP/Kerberos support in the near future?

  Thanks,

  Allan

  [This message has been edited by Allan (edited 12-12-2005).]

  Posted 18 years ago #

• Scott McGuire Administrator

  Hi Allan,

  While Fetch does not have an explicit setting for SFTP with Kerberos, if your server is configured to use SSH with Kerberos v5 (GSSAPI), Fetch should use Kerberos when you choose SFTP and connect to that server. Just leave the password blank to use your Kerberos tickets instead.

  However, for a variety of reasons, if you do not already have Kerberos tickets and leave your password blank when choosing SFTP, Fetch will not show you the Kerberos authentication dialog to get tickets. We hope to address that some time in the future.

  Thanks,

  Scott McGuire
  Fetch Softworks

  Posted 18 years ago #

• Allan Member

  Unfortunately this is not happening. I have a ticket and attempt an SFTP to a server that accepts tickets. After hitting connect, Fetch asks for a password (it didn't use the ticket).

  Posted 18 years ago #

• Scott McGuire Administrator

  Hi Allan,

  Sorry, it turns out there is a bug in how we handle SFTP connections when you don't provide a password that makes Fetch ask you for a password again. When Fetch prompts you for your password the extra time, just leave your password blank again and click on OK. Then it really should use your Kerberos tickets. Let us know if that doesn't work, and we'll gather some debugging information.

  If leaving your password blank in the extra prompt does work, you can work around the extra prompt by doing the following:

  * Connect again, leaving your password blank.
  * When the password prompt comes up, leave the password blank again, but this time, click the "Add password to keychain" checkbox. Click on OK.

  From now on, you should not get the second password prompt when you try to connect via SFTP and have Kerberos tickets. An empty password for the server is stored in your keychain, so your Kerberos password is not at risk. When Fetch gets the empty password out of the keychain, it will know to use your tickets instead.

  Sorry for the extra steps.

  Thanks,

  Scott McGuire
  Fetch Softworks

  Posted 18 years ago #

• Allan Member

  your suggestion worked. thanks. Hopefully you can fix the bug for the next release.

  -Allan

  Posted 18 years ago #

• Scott McGuire Administrator

  Hi Allan,

  It may not be in the next release, but it's definitely on our to-do list.

  Thanks,

  Scott McGuire
  Fetch Softworks

  Posted 18 years ago #