On 15.05.2020 19.07 I wrote:
On 15.05.2020 - 19.02 Rob Crittenden wrote:
> Jochen Kellner via FreeIPA-users wrote:
>> Klaus Vink Slott via FreeIPA-users
>> <freeipa-users(a)lists.fedorahosted.org> writes:
>>
>>> But at the same time it is really annoying that to
>>> satisfy kerberos, I have to type the fqdn at the ssh prompt every time.
>>
>> I have the following in my laptops ~/.ssh/config:
>> ,----
>> | CanonicalizeHostname always
>> | CanonicalDomains
example.org
>> `----
If I cant make the below work. That is definitely better than now.
> Perhaps the sssd global file /var/lib/sss/pubconf/known_hosts
That seems like a good target. I'll look into pulling that in.
So it seems that
this file is hashed and I did not find a easy way
around that. But then it occurred to me that the fqdn is most likely
present in bash_history. Googling that found me this solution:
https://unix.stackexchange.com/questions/291510/autocomplete-hostnames-wh...
Combining with CanonicalDomains I think improved my IPA life :-)
--
Thanks all!
Klaus