Jochen Kellner via FreeIPA-users wrote:
Klaus Vink Slott via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> writes:
> But at the same time it is really annoying that to
> satisfy kerberos, I have to type the fqdn at the ssh prompt every time.
I have the following in my laptops ~/.ssh/config:
,----
| CanonicalizeHostname always
| CanonicalDomains
example.org
`----
Perhaps the sssd global file /var/lib/sss/pubconf/known_hosts
It don't always contain all hosts but it will grow over time I imagine.
I'm not sure of their implementation.
rob