[OpenAFS-devel] FC5 and openafs 1.4.1

Jim Rees rees@umich.edu
Sat, 06 May 2006 11:19:52 -0400


It's not quite what you asked for, but you could kinit on the client, then
use gss authentication and ticket forwarding to ssh to the server.  Then you
would have your afs tokens without typing your password on the server side.
That's what I do.

If you really want to use ssh keys to authenticate to afs, I don't think
that's possible right now.  You need something like pkinit.  Existing
implementations use x.509 keys, not ssh.