[Freeipa-users] Re: Configuring Client SSH Access Problem

[Andreas Schneider]

On Wednesday 09 December 2009 08:16:45 Michael Kang wrote:
> > ssh admin@*ipaserver*.example.com (This don't need passwd.)
> >
> > PC or Mac:
> > ssh admin@*ipaclient*.example.com (This still need passwd.)
> >

OpenSSH has disabled gssapi (kerberos) support by default for client and 
server. You have to enable it in /etc/ssh/ssh_config or/and 
/etc/ssh/sshd_config.

Cheers,

	-- andreas