ksshaskpass to add my password protected keys into
ssh-agent upon logging into KDE, is there something similar for kerberos?
I would look into using pam-krb5.
On Debian and Ubuntu, it should be
The PAM configuration would look something like:
It takes the password you used to authenticate locally, e.g. the password in
If your Kerberos password is the same as your system password, you don't need to type it again.
If your Kerberos password is different from your system password, what happens depends on whether you used
Note that this probably makes ksshaskpass redundant too, because you can also have:
On Debian and Ubuntu, that requires installing libpam-ssh.
Normally, Kerberos would be integrated with PAM pam_krb5.so. It will attempt to acquire a Kerberos ticket based on your username and the password you supply. It can also use that to verify whether you are allowed to login, but that can be set to ignore if you just want the ticket. It needs to be added as both an auth and a session module, probably also password if you plan to keep your Kerberos password in sync with your desktop. If you plan to use Kerberos for verifying a user's login, you should also setup your keytab file at /etc/krb5.keytab with a key for host/hostname.example.com@EXAMPLE.COM replace hostname and example.com as appropriate for your environment.