[OpenAFS] Passwordless login through ssh on krb5/afs enabled workstation.

Simon Wilkinson sxw@inf.ed.ac.uk
Thu, 8 Mar 2007 10:33:57 +0000


On 8 Mar 2007, at 10:16, Alexander Al wrote:

> Is there a possibility that you can use the authorized keys with ssh?

The problem is that ssh's authorized keys authentication mechanism  
has no way of getting you a Kerberos ticket, and therefore, no way of  
getting you an AFS token in order to access your files. You'll need  
to explicitly kinit and aklog once you've logged in.

Of course, if you have Kerberos on the machine you're connecting  
from, you can use Kerberos to give you passwordless login, forwarding  
your tickets to your workstation, and then have a PAM module get your  
AFS tokens as part of the login process.

Simon.