Re: [Freeipa-users] Ticket transfer from host to host

[Rob Crittenden]

Thomas Lau wrote:
> Hi Rob,
> 
> So what you are trying to say is that it's nothing to do with FreeIPA
> but ssh client itself?

Correct.

rob

> 
> On Mon, Nov 30, 2015 at 11:39 AM, Rob Crittenden  > wrote:
> 
> Thomas Lau wrote:
> > ​Hi all,
> >
> > I am running FreeIPA 3.3.x in our environment. First I did is kinit on
> > client 1, then ssh to host A, it works fine; But then if I want to ssh
> > from host A to host B, I have to do kinit again, is there have a
> way to
> > do ticket transfer? Or is it call "Ticket Delegation"? How could I
> > config it to function properly?​
> >
> >
> 
> man ssh
> 
>  -K  Enables GSSAPI-based authentication and forwarding
> (delegation)
>  of GSSAPI credentials to the server.
> 
> rob
> 
> 
> 
> 

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Ticket transfer from host to host

[Rob Crittenden]

Thomas Lau wrote:
> ​Hi all,
> 
> I am running FreeIPA 3.3.x in our environment. First I did is kinit on
> client 1, then ssh to host A, it works fine; But then if I want to ssh
> from host A to host B, I have to do kinit again, is there have a way to
> do ticket transfer? Or is it call "Ticket Delegation"? How could I
> config it to function properly?​
> 
> 

man ssh

 -K  Enables GSSAPI-based authentication and forwarding (delegation)
 of GSSAPI credentials to the server.

rob

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

[Freeipa-users] Ticket transfer from host to host

[Thomas Lau]

​Hi all,

I am running FreeIPA 3.3.x in our environment. First I did is kinit on
client 1, then ssh to host A, it works fine; But then if I want to ssh from
host A to host B, I have to do kinit again, is there have a way to do
ticket transfer? Or is it call "Ticket Delegation"? How could I config it
to function properly?​
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Ticket transfer from host to host

[Thomas Lau]

Hi Rob,

So what you are trying to say is that it's nothing to do with FreeIPA but
ssh client itself?

On Mon, Nov 30, 2015 at 11:39 AM, Rob Crittenden 
wrote:

> Thomas Lau wrote:
> > ​Hi all,
> >
> > I am running FreeIPA 3.3.x in our environment. First I did is kinit on
> > client 1, then ssh to host A, it works fine; But then if I want to ssh
> > from host A to host B, I have to do kinit again, is there have a way to
> > do ticket transfer? Or is it call "Ticket Delegation"? How could I
> > config it to function properly?​
> >
> >
>
> man ssh
>
>  -K  Enables GSSAPI-based authentication and forwarding
> (delegation)
>  of GSSAPI credentials to the server.
>
> rob
>
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project