From 0b3764053723f8666f2f41157f9b4facc9dd3e31 Mon Sep 17 00:00:00 2001 From: Manoj Ampalam Date: Tue, 16 May 2017 10:18:30 -0700 Subject: [PATCH] Created About SSH remote sessions (markdown) --- About-SSH-remote-sessions.md | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 About-SSH-remote-sessions.md diff --git a/About-SSH-remote-sessions.md b/About-SSH-remote-sessions.md new file mode 100644 index 0000000..89b12ee --- /dev/null +++ b/About-SSH-remote-sessions.md @@ -0,0 +1,10 @@ +Win32-OpenSSH currently supports password and key based authentication. Both local (workgroup) and domain accounts are supported. For domain accounts it is necessary to specify the domain as part of user name. See [wiki](https://github.com/PowerShell/Win32-OpenSSH/wiki/ssh.exe-examples) for different supported formats. + +### Double Hop differences between password and keybased auth +- A remote session opened via password authentication has the user credentials attached to it and hence is capable of outbound authentication as the user. +- A remote session opened via key based authentication does not have associated user credentials and hence is **not** capable of outbound authentication as the user. This is by design and goes by the rules of standard Windows security. + + + + +