URL:
https://github.com/SSSD/sssd/pull/5849
Title: #5849: SSH: changed default value of `ssh_hash_known_hosts` to false
alexey-tikhonov commented:
"""
If there is any verification procedure to run on top of this?
Generally LGTM.
Something like
https://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/host-ke...
(didn't find anything newer).
When SSSD client is enrolled in IPA domain, it will have
`/etc/ssh/ssh_config.d/04-ipa.conf` pointing to `/var/lib/sss/pubconf/known_hosts` as a
system wide known_hosts file.
This file will be populated with a content from IPA server. `ssh_hash_known_hosts`
specifies content format.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5849#issuecomment-955715816