On 15.05.2020 - 19.02 Rob Crittenden wrote:
Jochen Kellner via FreeIPA-users wrote:
> Klaus Vink Slott via FreeIPA-users
> <freeipa-users(a)lists.fedorahosted.org> writes:
>
>> But at the same time it is really annoying that to
>> satisfy kerberos, I have to type the fqdn at the ssh prompt every time.
>
> I have the following in my laptops ~/.ssh/config:
> ,----
> | CanonicalizeHostname always
> | CanonicalDomains
example.org
> `----
If I cant make the below work. That is definitely better than now.
Perhaps the sssd global file /var/lib/sss/pubconf/known_hosts
That seems like a good target. I'll look into pulling that in.
--
Thanks!