On Thu, Apr 28, 2016 at 10:40:58AM +0200, Jakub Hrozek wrote:
Hi,
please see the attached patch. I didn't find any information in the ssh man pages about the expected error codes from the AuthorizedKeysCommand, but I think we should at least suppress the error messages..
I tested with: $ sss_ssh_authorizedkeys root $ sss_ssh_authorizedkeys user-from-passwd $ sss_ssh_authorizedkeys user-from-ipa $ sss_ssh_authorizedkeys non-existing-user
The first three should be silent, the last one still prints an error message. I think that's acceptable, because I would expect ssh to call getpwnam() on its own before calling the AuthorizedKeysCommand.
bump.