On Thu, Apr 28, 2016 at 10:40:58AM +0200, Jakub Hrozek wrote:
Hi,
please see the attached patch. I didn't find any information in the ssh
man pages about the expected error codes from the AuthorizedKeysCommand,
but I think we should at least suppress the error messages..
I tested with:
$ sss_ssh_authorizedkeys root
$ sss_ssh_authorizedkeys user-from-passwd
$ sss_ssh_authorizedkeys user-from-ipa
$ sss_ssh_authorizedkeys non-existing-user
The first three should be silent, the last one still prints an error
message. I think that's acceptable, because I would expect ssh to call
getpwnam() on its own before calling the AuthorizedKeysCommand.
bump.