On 06/28/2016 06:45 PM, Jakub Hrozek wrote:
On Thu, Apr 28, 2016 at 10:40:58AM +0200, Jakub Hrozek wrote:
> please see the attached patch. I didn't find any information in the ssh
> man pages about the expected error codes from the AuthorizedKeysCommand,
> but I think we should at least suppress the error messages..
> I tested with:
> $ sss_ssh_authorizedkeys root
> $ sss_ssh_authorizedkeys user-from-passwd
> $ sss_ssh_authorizedkeys user-from-ipa
> $ sss_ssh_authorizedkeys non-existing-user
> The first three should be silent, the last one still prints an error
> message. I think that's acceptable, because I would expect ssh to call
> getpwnam() on its own before calling the AuthorizedKeysCommand.