[Freeipa-users] passwordless login into IPA clients possible from non IPA client?

2014-03-19 Thread Fred van Zwieten
Hi, Subject says it all actually. I have a laptop with Fedora20. I work as a contractor on different assignments. Some of them have an IPA domain set up. Their RHEL6 servers are all IPA clients. I would like to ssh into these servers passwordless using ssh-agent and such. Is this possible? If so,

Re: [Freeipa-users] passwordless login into IPA clients possible from non IPA client?

2014-03-19 Thread Andrew Holway
Hi Fred, You can add your public keys to the users profile via the GUI of CLI. Take contents of the .ssh/id_rsa.pub from your Fedora20 Laptop and insert it in the GUI. User - ACCOUNT SETTINGS - SSH public keys - add http://docs.fedoraproject.org/en-US/Fedora/17/html/FreeIPA_Guide/user-keys.html

Re: [Freeipa-users] passwordless login into IPA clients possible from non IPA client?

2014-03-19 Thread KodaK
Andrew's suggestion works fine, but you can also set up a simple krb5.conf on the source hosts and then issue a kinit. It doesn't have to be a full IPA client for that to work. You can also do this from a Windows box by using the MIT Kerberos for Windows package: