Comment 3 for bug 507391

Revision history for this message
Michael van der Kolff (mvanderkolff) wrote :

FWIW, Paramiko does support SSH key-based authentication. Are you sure you can't use SSH keys to accomplish your goal, capitol? That wouldn't expose any password, as only the public key is on the server... As it stands, unless you have insanely long TGT expiry times, I can't see how Kerberos could be used in anything but an interactive setting, unless you kept a local password stash - I don't know if that's any better. Of course, the private key is the same thing, but you can restrict what services it opens, and a password stash might contain a password you use elsewhere.