Are there any good (reliable / free) ssh clients that work easily with Active Directory authenticated accounts in a Windows environment? Ideally that wouldn't need the Kerberos for Windows package?
I know there are various modified versions of putty that support GSSAPI authentication which in turn allows authentication via Kerberos to remote systems if you've authenticated via Kerberos on the local system (IE you've logged into your windows system using an Active Directory account and that same AD account exists on the remote server you're accessing via SSH)
Are there any other ssh clients that support kerberos / GSSAPI authentication using the local windows AD generated Kerberos credentials?
I found this page which has a list of GSSAPI aware windows clients but I've never used any of them. This page also seems to imply that secureCRT also supports kerberos, but again I've never used it in a kerberized environment.
Any experiences with good ssh clients? Good and free?
My experience with various modified versions of putty is that it works great when accessing Kerberized servers but if you tell it to try GSSAPI and then access a non-kerberized server, it hangs for almost a minute before attempting password authentication. It also relies on the MIT Kerberos for Windows Identity Manager, which isn't a deal breaker for me but when I try to explain how it works to others, their eyes start to glaze over as I describe all the moving parts...
Thanks!
I believe that both putty (see here) and SecureCRT support Kerberos. I've never tried either of them in a kerberized environment, so I can't speak about the delay you mentioned...
There are probably other options available too.
Have you considered Cygwin's ssh client? I don't actually know if it does this (and don't have a copy around to test with), but I'd imagine it has the capability.