Use Reflection Kerberos for GSSAPI Authentication

This procedure configures Reflection Kerberos to use your Windows domain credentials to authenticate to a Secure Shell server. Kerberos authentication for Secure Shell connections is enabled for the currently specified SSH configuration scheme in the Secure Shell configuration file.

If the system administrator has installed a Kerberos configuration file on your PC, Reflection Kerberos is automatically configured the first time you start a Reflection application. Reflection Kerberos settings are stored in the registry on a per-user basis and are available to all Reflection applications that use the Kerberos client.

To use Reflection Kerberos for GSSAPI Authentication

Open the Reflection Secure Shell Settings dialog box.
On the General tab, select GSSAPI/Kerberos under User Authentication.
On the GSSAPI tab, select Reflection Kerberos.
Click Configure.
In the Initial Configuration dialog box, type the principal name, realm, and KDC host. If your system is already configured for Kerberos, Kerberos Manager starts instead.

NOTE:After authentication, Reflection Kerberos forwards your Kerberos Ticket Granting Ticket (TGT) to the host. To disable ticket forwarding, see Kerberos Ticket Forwarding in Secure Shell Sessions.