Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-8869: What Putty settings are needed for Kerberos SSO cross domain/forest

Authentication Service ,  

21 June,17 at 04:56 PM

Applies to: All versions of Centrify DirectControl Putty

Question:
What settings are required to allow SSO to a machine located in another forest or domain?

Answer: 
In Putty please ensure you have the following options checked:
1) SSH -> Kerberos -> "Attempt Kerberos Auth"
2) SSH -> Kerberos -> "Find machine from trusted domains"

User-added image

Note:
Please review the following to troubleshoot:
KB-4303: How to troubleshoot SSH Single-Sign-On (SSO) and nested SSO?
KB-1698: Troubleshooting Single Sign On (SSO) issues

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.

Related Articles

 articleKB-1619: Unable to login after raising the Domain/Forest level to 2008 articleKB-4303: How to troubleshoot SSH Single-Sign-On (SSO) and nested SSO? articleKB-0029: Firewall port settings for Centrify DirectControl articleKB-7555: Unable to login as root after upgrade to Centrify Suite 2016 (CDC 5.3.0) articleKB-6044: How to configure users for automatic Kerberos Credentials for infinite renewal even after users have logged out? articleKB-6056: How to report the group policy settings that are in effect for the local computer? articleKB-3925: How to add Centrify parameter to a group policy articleKB-6050: How to configure a group for automatic Kerberos Credentials for infinite renewal? articleKB-6041: How to show current license type in use by adclient