Cockpit Key Based Authentication================================Cockpit allows you to monitor and administer several servers at the same time.While you will need to connect to the primary server with a passwordor kerberos ticket, cockpit does support accessing secondary machines viapublic key based authentication.Note that when a user is authenticated in this way the authentication happenswithout a password, as such the standard cockpit reauthorization mechanisms donot work. The user will only be able to obtain additional privileges if they do not require a password.In order to support key based authentication cockpit adds pam_ssh_add.soto it's pam stack. Once a user is successfully logged in a new ssh-agentis started and ssh-add is run to load the default keys, if a password isrequested the one the user logged in with is provided.When cockpit attempts to establish an ssh connection to a new server,the running ssh-agent is used to offer any loaded public keys to theremote server as authentication options.When the user logs out or has their session terminated, the ssh-agent is alsoterminated.