PowerShell / PowerShell/Win32-OpenSSH
Add support for GSSAPIRenewalForcesRekey
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 8.3k
- Forks
- 819
- PR merge metrics
- No merged PRs in 30d
Description
Summary of the new feature / enhancement
As a Windows desktop user, my Kerberos credentials are refreshed on login or screen unlock. If we're able to use the GSSAPIRenewalForcesRekey option in the openssh client, this should allow downstream clients to rekey seamlessly and store the updated Kerberos tgt.
At the moment I see:
Bad configuration option: gssapirenewalforcesrekey
Proposed technical implementation details (optional)
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the Win32-OpenSSH client configuration handling for the GSSAPIRenewalForcesRekey option and trace the existing Kerberos credential renewal and rekey flow. Confirm how the option should be accepted on Windows, then verify that refreshed Kerberos credentials trigger seamless rekeying and storage of the updated ticket-granting ticket.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100