Am Thu, Feb 13, 2025 at 02:24:58PM +0100 schrieb Ronald Wimmer via FreeIPA-users: > I am aware of two cases here. The first one is that I do already have a TGT > that I can delegate to the target host and some magic fetches the right NFS > ticket for me. The second one is that I connect to the target host and enter > a password and SSSD fetches a TGT and NFS ticket for me. > > Both cases allow me to access a kerberized NFS share. But what is when I use > SSH pubkey auth (pubkey in IPA) to connect to the target host? Should I also > get a TGT and NFS ticket to access a kerberized NFS share?
Hi, no, pubkey authentication happens completely inside of sshd and no one else has access to anything involved and hence cannot act upon it. HTH bye, Sumit > > Cheers, > Ronald > -- > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue -- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
