On Thu, 21 Apr 2016, Sumit Bose wrote:
On Thu, Apr 21, 2016 at 10:13:20AM +0100, John Hodrien wrote:
> On Thu, 21 Apr 2016, Sumit Bose wrote:
>
> >In this case SSSD has nothing to do with ccache handling, everything is
> >done by sshd.
>
> I was suspicious about windows not providing a forwardable ticket by default,
> and it not being ssh or sssd's fault.
>
> Have you managed SSO with delegation to a machine not running sssd using
> putty?
ah, this reminds me that the host must be configured to be trusted for
delegation, see AD's 'AD Users and Computers' tool, find your target
host and check the 'Delegation' tab.
We see a failure connecting from a windows machine with putty, but success
from a linux machine. Neither machine appears to be configured for delegation
within AD (both listed as Do not trust this computer for delegation).
jh