On Thu, Apr 28, 2016 at 09:14:48PM -0400, Prasun Gera wrote: > > > > Your can still authenticate with SSH keys, but to access any NFS 4 shares > > they will need a Kerberos ticket, which can be obtained via a 'kinit' after > > logging in. > > > > Then how does the key authentication work if the .ssh directory on nfs4 is > not accessible ? Doesn't the key authentication process rely on > .ssh/authorized keys being readable by the authentication module ?
SSSD can fetch the authorized keys from IPA, see man sss_ssh_authorizedkeys(1) -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
