Configure PuTTY for Windows-Based SSO with Likewise

Authentication, Group Policy, Audit and Reporting

To use PuTTY with Likewise to connect to a Linux or Unix machine from a Windows machine and then connect to a second Linux or Unix, you must configure PuTTY to allow ticket forwarding and you must set the base Linux or Unix computer in Active Directory to be trusted for delegation. Important: The following procedure assumes that you are using a GSSAPI-enhanced version of PuTTY, such as release 0.56b2, which you can download at http://www.css-security.com/cgi-bin/dnld_list.pl.

Configure PuTTY

1. In the PuTTY Configuration dialog, select Allow Kerberos 5 ticket forwarding (SSH 1/2).
2. Select Attempt GSSAPI/Kerberos 5 authentication:

Configure the Base Linux Computer in Active Directory

This procedure assumes the base Linux or Unix computer is joined to Active Directory with Likewise. To perform this procedure, you must be a member of the Domain Administrators security group or the Enterprise Administrators security group, or you must have been delegated authority.

Windows Server 2003 R2
1. In Active Directory Users and Computers, in the console tree, click Computers.
2. In the details pane, right-click the computer that you want, and then click Properties.
3. On the Delegation tab, click Trust this computer for delegation to specified services only:

4. Confirm that Use Kerberos only is selected.
5. Click Add and, in Add Services, click Users and Computers.
6. In Enter the object names to select, type the name of the user or computer that the computer will be trusted to delegate for, and then click OK.
7. In Add Services, click the service or services that will be trusted for delegation and then click OK.

Windows 2000
1. In Active Directory Users and Computers, in the console tree, click Computers.
2. In the details pane, right-click the computer that you want, and then click Properties.
3. On the General tab, select Trust computer for delegation:

Next > > Single Sign-On for Apache Web Server