On ti, 23 loka 2018, Johannes Falke via FreeIPA-users wrote:
For posterity, I had the same issue and fixed it by explicitly setting
ldap_user_ssh_public_key = ipaSshPubKey
in the domain portion of sssd.conf. Otherwise I assume it looks for the attribute "sshPublicKey", since that's what it's called in the sssd cache DB.
ipasshpubkey is the default for 'id_provider = ipa', so you don't need to change that if you are actually using IPA id provider.