Cyberduck Mountain Duck CLI

Opened 13 years ago

Last modified 3 years ago

#133 assigned feature

Kerberos Support

Reported by: bborofka@… Owned by: dkocher
Priority: normal Milestone:
Component: core Version: 3.0.1
Severity: normal Keywords:
Cc: Architecture:
Platform:

Description

I think it would be awesome if Cyberduck had Kerberos support for Single Signon. Mac OS X Server has Kerberized FTP support, yet there are no FTP clients that I know of that support Kerberos.

Change History (19)

comment:1 Changed 13 years ago by anonymous

  • Priority changed from low to high

comment:2 Changed 13 years ago by dkocher

  • Milestone changed from 2.6 to 2.7
  • Priority changed from high to low
  • Status changed from new to assigned

comment:3 Changed 13 years ago by dkocher

  • Milestone 2.7 deleted

Milestone 2.7 deleted

comment:4 Changed 13 years ago by anonymous

I know that a certain large university has evaluated including Cyberduck in their standard applications and the only roadblock was that there was no Kerberos support. It is a make-or-break feature for them.

comment:5 follow-up: Changed 10 years ago by anonymous

  • Priority changed from low to high
  • Severity changed from normal to major
  • Version changed from 2.5.3 to 3.0.1

Please - this is a feature that would lead to more educational institutions adopting (and happily donating for) your wonderful product. With all the effort made by institutional IT dept to embrace either Microsoft Active Directory or another Directory Service that uses Kerberos, it is a shame to have applications that do not take advantage of all the benefits single sign-on offers. Apple has kerberized many, many services (including FTP, as noted, but WebDAV as well) in the Finder. I know my institution would love to use Cyberduck but the roadblock is lack of kerberization!

bryan underscore gucwa at fitnyc dot edu

comment:6 in reply to: ↑ 5 Changed 10 years ago by dkocher

Replying to anonymous:

Please - this is a feature that would lead to more educational institutions adopting (and happily donating for) your wonderful product. With all the effort made by institutional IT dept to embrace either Microsoft Active Directory or another Directory Service that uses Kerberos, it is a shame to have applications that do not take advantage of all the benefits single sign-on offers. Apple has kerberized many, many services (including FTP, as noted, but WebDAV as well) in the Finder. I know my institution would love to use Cyberduck but the roadblock is lack of kerberization!

bryan underscore gucwa at fitnyc dot edu

I have no experience with Kerberos and no system to my availability for testing but I would welcome a patch. There would both be the option to implement this using the native MIT Kerberos API or using Java GSSAPI.

comment:7 Changed 8 years ago by dkocher

  • Owner dkocher deleted
  • Status changed from assigned to new

comment:8 Changed 8 years ago by dkocher

  • Priority changed from high to normal
  • Severity changed from major to normal

comment:9 Changed 6 years ago by dkocher

We would need a Kerberos environment to test.

comment:10 follow-up: Changed 5 years ago by cpcd

I'd be happy to setup a kerberized server for testing. Please email me for more details.

comment:11 Changed 5 years ago by dkocher

Registered SPNEGO and KERBEROS authentication schemes for use with WebDAV connections in r14210.

comment:12 Changed 5 years ago by dkocher

Connection to SFTP servers with GSSAPIAuthentication enabled should just work.

comment:13 Changed 4 years ago by dkocher

#8695 closed as duplicate.

comment:14 in reply to: ↑ 10 Changed 4 years ago by dkocher

Replying to cpcd:

I'd be happy to setup a kerberized server for testing. Please email me for more details.

Can you please write to mailto:feedback@… if this option is still current.

comment:15 Changed 4 years ago by dkocher

  • Milestone set to 5.0
  • Owner set to dkocher
  • Status changed from new to assigned

comment:16 Changed 4 years ago by dkocher

We will focus to bring support for SSH connections. For example, MIT has deprecated GSSAPI FTP End Of Life for Kerberized FTP (GSSAPI FTP) .

comment:17 Changed 3 years ago by dkocher

Kerberos Support for SSH connections has landed upstream.

comment:18 Changed 3 years ago by dkocher

  • Type changed from enhancement to feature

comment:19 Changed 3 years ago by dkocher

  • Milestone 5.0 deleted
Note: See TracTickets for help on using tickets.
swiss made software