I have a Linux server that authenticates users against an Active Directory. Now interactive logins require username and password and automatic login requires a keytab (Kerberos) for passwordless authentication.
However, I have read in NIST IR 7966 that keytab authentication is not as secure as public/private key pair authentication because in this case you can restrict the access to the execution of a command and you have more control over what systems can the user authenticate.
So, I would like to use public/private key pair and continue authenticating against an Active Directory from a Linux server. Is this possible?