Also, do ipa-client-install configure to be a ssh server?
>From what I understand from the documentation, ipa-client-install does not
>configure the client machine to be a kerberized ssh server.
John Robert Mendoza
--- On Sat, 1/23/10, Michael Kang <wxi...@gmail.com> wrote:
From: Michael Kang <wxi...@gmail.com>
Subject: [Freeipa-users] Configuring Client SSH Access Failure
To: "freeipa-users" <freeipa-users@redhat.com>
Date: Saturday, 23 January, 2010, 11:34 AM
Hi all,
I'm trying to configure client ssh access on Fedora 12 and I can't access
ipaclient without password.
I'm following this document:
http://freeipa.org/docs/1.2/Client_Setup_Guide/en-US/html/sect-Client_Configuration_Guide-Configuring_Fedora_as_an_IPA_Client-Configuring_Client_SSH_Access.html
At the end of this document:
The IPA client should now be fully configured to accept
incoming SSH connections and authenticate with the user's Kerberos
credentials. Use the following command on another machine to test the
configuration. This should succeed without asking for a password.
# ssh ad...@ipaclient.example.com
As I see it, another machine don't need to install any ipa
software and it can access ipaclient without password.
I have three Fedora machine:
ipa.example.com(IPA Server)
client.example.com(IPA Client)node.example.com(another machine which was not
installed ipa-client or ipa-server)The client.example.com can access
ipa.example.com without password. But the node.example.com can't access
client.example.com.
Do I misunderstand the document or configure incorrect?
Thanks,
Michael
--
Michael Kang（康上明学）
There is a giant asleep within every man. When the giant awakens,miracles
happen.
Personal blog: http://ufusion.org - United Fusion
-----Inline Attachment Follows-----
_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users
Get your new Email address!
Grab the Email name you've always wanted before someone else does!
http://mail.promotions.yahoo.com/newdomains/ph/_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users
