I have a Linux server that authenticates users against an Active Directory. Now interactive logins require username and password and automatic login requires a keytab (Kerberos) for passwordless authentication.However, I have read in NIST IR 7966 that keytab authentication is not as secure as public/private key pair authentication because in this case you can restrict the access to the execution of a command and you have more control over what systems can the user authenticate.So, I would like to use public/private key pair and continue authenticating against an Active Directory from a Linux server. Is this possible?
Can a Linux server that authenticates against an Active Directory accept public/private keys for passwordless login?
scripting;authentication;key authentication;active directory;kerberos