On May 31, 2007, at 3:45 PM, Tim Rupp wrote:

Can Nessus be pointed to a keytab file for use in authentication when trying to SSH to other machines to perform local checks?

No

If not, is there any documentation I can read for configuring ssh + kerberos auth to be used for local checks? Has anyone successfully done this that I can contact on or off list?


You must go to the kerberos configuration settings and change :


Kerberos Key Distribution Center (KDC):   IP_OF_THE_KDC
Kerberos KDC Port: 88  (default)
Kerberos KDC Transport: UDP (default)
Kerberos Realm (SSH only): Realm name


And in the ssh preference tab you still need to give your username and password.

The kerberos SSH implementation in NASL only supports DES for now on (contrary to Windows where RC4 is supported).


Regards,

Nicolas
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to