# ansible over SSH with GSSAPI?

**URL:** <https://forum.ansible.com/t/ansible-over-ssh-with-gssapi/11601>\
**Category:** Ansible Project\
**Created:** [June 5, 2012, 10:03am UTC](https://forum.ansible.com/t/ansible-over-ssh-with-gssapi/11601 "2012-06-05T10:03:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jpmens1](https://avatars.discourse-cdn.com/v4/letter/j/e9c0ed/32.png) [@jpmens1](https://forum.ansible.com/u/jpmens1)\
**Post date:** [June 5, 2012, 10:03am UTC](https://forum.ansible.com/t/ansible-over-ssh-with-gssapi/11601/1 "2012-06-05T10:03:35Z")

</div>

Hello,

Getting my feet wet with Ansible, and the first I run into is I can't  
use ansible over SSH with GSSAPI (Kerberos) authentication. I've found  
a pointer [1] that paramiko doesn't support GSSAPI.

Am I right that it isn't supported or am I on the wrong track?

Using private SSH keys instead of Kerberos tickets wouldn't be "ideal" 🙂

Regards,

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-JP

[1] [https://bugs.launchpad.net/paramiko/+bug/507391](https://bugs.launchpad.net/paramiko/+bug/507391)

---

<div class="post-metadata">

**Author:** ![Michael\_DeHaan](https://avatars.discourse-cdn.com/v4/letter/m/c4cdca/32.png) [@Michael\_DeHaan](https://forum.ansible.com/u/Michael_DeHaan)\
**Post date:** [June 8, 2012, 2:05am UTC](https://forum.ansible.com/t/ansible-over-ssh-with-gssapi/11601/2 "2012-06-08T02:05:25Z")

</div>

You are right.

We played around with libssh2 as an option though it doesn’t seem mature enough yet (poor response to github tickets, ssh-agent support added just last month).

There may be still some experimental games we can play in the future with (maybe?) invoking SSH directly and some optimizations, though ansible-pull is also a very good solution (uses git+cron, and ansible in local non-ssh mode).

–Michael