[Freeipa-users] Re: Forcing ssh key login

[William Muriithi]

Hi Alfredo,
>  Anyone on this question?
>  cheers
>
>  /Alfredo
>
>  On Thu, 26 Jul 2018, 18:35 Alfredo De Luca, <alfredo.deluca(a)gmail.com&gt;
>  wrote:
>
> > Hi all.
> > I wonder how to force ssh keys only all the users with freeIPA. We have
> > 4.5.4 version.
> > Is it the only way changing the sshd_config from PasswordAuthentication
> > from yes to *NO*?
> > 
Its the same stuff you need to do for none IPA system.

You will also need to:
-  Have them generate a public private ssh key pair
-  (Have them add it to their IPA user profile) or add their public
key on authorization file.

If you do this, the IPA server don't do any authentication at all.  So
if you are using something like a kerberos based NFS, they will have
issues mounting their home directories.

Regards,
William