Using other Centrify-enabled PuTTY programs

In addition to the main PuTTy client (putty.exe), Centrify has modified the standard versions of the pscp.exe, psftp.exe, and plink.exe programs to support Kerberos authentication.

The modified pscp.exe program supports the following command formats:

pscp [options] [user@]host:source target 
pscp [options] source [source...] [user@]host:target
pscp [options] -ls [user@]host:filespec

The modified psftp.exe program supports the following command formats:

psftp [options] [user@]host

The modified plink.exe program supports the following command formats:

plink [options] [user@]host [command]

Many of the PuTTY settings can be provided as options to the command line tools. You can also save command line settings into sessions and load them when executing commands using the –load option. If the settings in a saved session conflict with those specified when invoking the command, the specified options take precedence.

In addition to the standard PuTTY command line options, Centrify PuTTY provides the following options:

Option	Description
-k	Use Kerberos authentication and provide a UNIX user account name during login. This option is equivalent to selecting Attempt Kerberos auth (SSH-2) and None for the Auto-login username in the Centrify PuTTY Kerberos configuration page.
-K	Use Kerberos authentication and do auto login. This option is equivalent to selecting both Attempt Kerberos auth (SSH-2) and the User principal name (requires DirectControl) for the Auto-login username in the Centrify PuTTY Kerberos configuration page.
-spn	Specify the service principal name (SPN) of the target computer. This option takes effect only when the –k or –K option is used. This option is equivalent to specifying the computer’s service principal name for the Service principal name in the Centrify PuTTY Kerberos configuration page.

The other Kerberos settings—such as Create forwardable tickets and Find machine from trusted domains—are not exposed as options to the pscp.exe, psftp.exe and plink.exe programs. You can configure these settings using the Centrify PuTTY client user interface, save them in a session, then load the session using the –load option.

The following example illustrates how to use Centrify PuTTY command line options to facilitate administrative tasks. In this example, the pscp.exe program is used to retrieve the file /etc/group from a remote Linux computer named RedHatLinux with the current user’s login name and Kerberos credentials for authentication on the remote computer:

pscp –K RedHatLinux:/etc/group c:\temp

Because this command uses the -K option, you don’t need to specify a user name in the command line or be prompted for password during runtime. Therefore, the command can be embedded in a batch file for administrative use. However, this command would require the remote RedHatLinux computer to have the Centrify Agent installed and be joined to an Active Directory domain.