Cyberduck Mountain Duck CLI

#133 assigned feature

Kerberos Support

Reported by: bborofka@… Owned by: dkocher
Priority: normal Milestone:
Component: core Version: 3.0.1
Severity: normal Keywords:
Cc: Architecture:
Platform:

Description

I think it would be awesome if Cyberduck had Kerberos support for Single Signon. Mac OS X Server has Kerberized FTP support, yet there are no FTP clients that I know of that support Kerberos.

Change History (19)

comment:1 Changed on Jan 24, 2006 at 9:47:38 PM by anonymous

  • Priority changed from low to high

comment:2 Changed on Jan 31, 2006 at 10:15:25 PM by dkocher

  • Milestone changed from 2.6 to 2.7
  • Priority changed from high to low
  • Status changed from new to assigned

comment:3 Changed on May 27, 2006 at 1:37:46 AM by dkocher

  • Milestone 2.7 deleted

Milestone 2.7 deleted

comment:4 Changed on Jun 7, 2006 at 2:52:05 PM by anonymous

I know that a certain large university has evaluated including Cyberduck in their standard applications and the only roadblock was that there was no Kerberos support. It is a make-or-break feature for them.

comment:5 follow-up: Changed on Sep 24, 2008 at 10:15:18 PM by anonymous

  • Priority changed from low to high
  • Severity changed from normal to major
  • Version changed from 2.5.3 to 3.0.1

Please - this is a feature that would lead to more educational institutions adopting (and happily donating for) your wonderful product. With all the effort made by institutional IT dept to embrace either Microsoft Active Directory or another Directory Service that uses Kerberos, it is a shame to have applications that do not take advantage of all the benefits single sign-on offers. Apple has kerberized many, many services (including FTP, as noted, but WebDAV as well) in the Finder. I know my institution would love to use Cyberduck but the roadblock is lack of kerberization!

bryan underscore gucwa at fitnyc dot edu

comment:6 in reply to: ↑ 5 Changed on Nov 3, 2008 at 7:40:03 PM by dkocher

Replying to anonymous:

Please - this is a feature that would lead to more educational institutions adopting (and happily donating for) your wonderful product. With all the effort made by institutional IT dept to embrace either Microsoft Active Directory or another Directory Service that uses Kerberos, it is a shame to have applications that do not take advantage of all the benefits single sign-on offers. Apple has kerberized many, many services (including FTP, as noted, but WebDAV as well) in the Finder. I know my institution would love to use Cyberduck but the roadblock is lack of kerberization!

bryan underscore gucwa at fitnyc dot edu

I have no experience with Kerberos and no system to my availability for testing but I would welcome a patch. There would both be the option to implement this using the native MIT Kerberos API or using Java GSSAPI.

comment:7 Changed on Dec 12, 2010 at 8:34:50 PM by dkocher

  • Owner dkocher deleted
  • Status changed from assigned to new

comment:8 Changed on Dec 12, 2010 at 8:35:32 PM by dkocher

  • Priority changed from high to normal
  • Severity changed from major to normal

comment:9 Changed on Jun 21, 2012 at 7:47:30 AM by dkocher

We would need a Kerberos environment to test.

comment:10 follow-up: Changed on Jul 27, 2013 at 2:57:31 PM by cpcd

I'd be happy to setup a kerberized server for testing. Please email me for more details.

comment:11 Changed on Apr 7, 2014 at 12:49:22 PM by dkocher

Registered SPNEGO and KERBEROS authentication schemes for use with WebDAV connections in r14210.

comment:12 Changed on Apr 7, 2014 at 12:51:19 PM by dkocher

Connection to SFTP servers with GSSAPIAuthentication enabled should just work.

comment:13 Changed on Mar 24, 2015 at 8:04:26 PM by dkocher

#8695 closed as duplicate.

comment:14 in reply to: ↑ 10 Changed on Mar 26, 2015 at 4:40:35 PM by dkocher

Replying to cpcd:

I'd be happy to setup a kerberized server for testing. Please email me for more details.

Can you please write to mailto:feedback@… if this option is still current.

comment:15 Changed on Mar 27, 2015 at 9:47:41 PM by dkocher

  • Milestone set to 5.0
  • Owner set to dkocher
  • Status changed from new to assigned

comment:16 Changed on May 19, 2015 at 9:35:33 AM by dkocher

We will focus to bring support for SSH connections. For example, MIT has deprecated GSSAPI FTP End Of Life for Kerberized FTP (GSSAPI FTP) .

comment:17 Changed on Jun 16, 2015 at 12:20:03 PM by dkocher

Kerberos Support for SSH connections has landed upstream.

comment:18 Changed on Feb 15, 2016 at 1:02:52 PM by dkocher

  • Type changed from enhancement to feature

comment:19 Changed on May 14, 2016 at 8:31:39 PM by dkocher

  • Milestone 5.0 deleted
Note: See TracTickets for help on using tickets.
swiss made software