[Freeipa-users] Ticket transfer from host to host

[Rob Crittenden]

Thomas Lau wrote:
> Hi Rob,
> 
> So what you are trying to say is that it's nothing to do with FreeIPA
> but ssh client itself?

Correct.

rob

> 
> On Mon, Nov 30, 2015 at 11:39 AM, Rob Crittenden <rcritten at redhat.com
> <mailto:rcritten at redhat.com>> wrote:
> 
>     Thomas Lau wrote:
>     > ​Hi all,
>     >
>     > I am running FreeIPA 3.3.x in our environment. First I did is kinit on
>     > client 1, then ssh to host A, it works fine; But then if I want to ssh
>     > from host A to host B, I have to do kinit again, is there have a
>     way to
>     > do ticket transfer? Or is it call "Ticket Delegation"? How could I
>     > config it to function properly?​
>     >
>     >
> 
>     man ssh
> 
>          -K      Enables GSSAPI-based authentication and forwarding
>     (delegation)
>                  of GSSAPI credentials to the server.
> 
>     rob
> 
> 
> 
>