Active Directory in WSL, Kerberos integration
- Dominant language
- C++
- Stars
- 33.7k
- Forks
- 1.8k
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 116
Description
**Is your feature request related to a problem? Please describe.**
While the Windows machine is a member of and AD domain and Windows programs (e.g. OpenSSH) can use Kerberos tickets to connect to remote machines (not necessarily Windows ones), programs running in WSL cannot.
**Describe the solution you'd like**
Create an IPC channel of sort for Kerberos libraries (MIT Kerberos, Heimdall etc.) to communicate with Windows and obtain Kerberos tickets.
**Describe alternatives you've considered**
Running `kinit` inside WSL is an alternative but the advantage of an SSO setup is totally lost, because users need to enter password twice and manage ticket renewal separately.
Contributor guide
Research direction
The issue names no source files, tests, or entry points; begin by identifying WSL's IPC and authentication entry points relevant to Windows and Linux. Clarify supported Kerberos libraries and SSO and ticket-renewal behavior with maintainers before implementation, then define tests for the completed integration.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- authentication, operating-systems, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100