My university uses Kerberos-based authentication for login to our unix servers.
One way to get passwordless login is to run
kinit, type my password, and then run
For this setup, I do the following inside my
Host SchoolHost1 SchoolHost2 GSSAPIKeyExchange yes GSSAPIAuthentication yes GSSAPIDelegateCredentials yes
My question is, can I skip the
kinit step and run
ssh directly , in such a way that the first attempt to
ssh will automatically grab a kerberos ticket so that subsequent attempts to
ssh will have the ticket and not require a password?
Update: Public Key login is not supported by the University's system, because the server cannot read
authorized_keys file before the login. This is a property of the
Kerberos / AFS system for which there is really no workaround.