@dkocher commented

Milestone 2.7 deleted

anonymous commented

I know that a certain large university has evaluated including Cyberduck in their standard applications and the only roadblock was that there was no Kerberos support. It is a make-or-break feature for them.

anonymous commented

Please - this is a feature that would lead to more educational institutions adopting (and happily donating for) your wonderful product. With all the effort made by institutional IT dept to embrace either Microsoft Active Directory or another Directory Service that uses Kerberos, it is a shame to have applications that do not take advantage of all the benefits single sign-on offers. Apple has kerberized many, many services (including FTP, as noted, but WebDAV as well) in the Finder. I know my institution would love to use Cyberduck but the roadblock is lack of kerberization!

bryan underscore gucwa at fitnyc dot edu

@dkocher commented

Replying to [comment:5 anonymous]:

Please - this is a feature that would lead to more educational institutions adopting (and happily donating for) your wonderful product. With all the effort made by institutional IT dept to embrace either Microsoft Active Directory or another Directory Service that uses Kerberos, it is a shame to have applications that do not take advantage of all the benefits single sign-on offers. Apple has kerberized many, many services (including FTP, as noted, but WebDAV as well) in the Finder. I know my institution would love to use Cyberduck but the roadblock is lack of kerberization!

bryan underscore gucwa at fitnyc dot edu

I have no experience with Kerberos and no system to my availability for testing but I would welcome a patch. There would both be the option to implement this using the native MIT Kerberos API or using Java GSSAPI.

@dkocher commented

We would need a Kerberos environment to test.

cb2977e commented

I'd be happy to setup a kerberized server for testing. Please email me for more details.

@dkocher commented

Registered SPNEGO and KERBEROS authentication schemes for use with WebDAV connections in c50c5cf.

@dkocher commented

Connection to SFTP servers with GSSAPIAuthentication enabled should just work.

@dkocher commented

#8695 closed as duplicate.

@dkocher commented

Replying to [comment:10 cpcd]:

I'd be happy to setup a kerberized server for testing. Please email me for more details.
Can you please write to mailto:feedback@cyberduck.io if this option is still current.

@dkocher commented

We will focus to bring support for SSH connections. For example, MIT has deprecated GSSAPI FTP End Of Life for Kerberized FTP (GSSAPI FTP) .

@dkocher commented

Kerberos Support for SSH connections has landed upstream.