Hi,
As of earlier today, a perfectly working set of systems lost their ability to login
through FreeIPA managed SSH Keys. FreeIPA was upgraded yesterday to 4.3.1 and everything
continued to work. Now, when I attempt to login using public keys, I get:
error: AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys kogan failed, status 1
If I then do `/usr/bin/sss_ssh_authorizedkeys --debug 10 kogan`, I get
"sss_ssh_authorizedkeys[7413]: sss_ssh_get_ent() failed (14): Bad address". it
seems very similar to
https://fedorahosted.org/freeipa/ticket/2657, but the DNS records
haven't changed as far as I know and the issue was supposedly fixed in much earlier
versions of sssd.
This is running on Fedora 23 with the following possibly relevant package version:
freeipa-server: 4.3.1-1.fc23
sssd: 1.13.4-4.fc23
openssh-server: 7.2p2-3.fc23
What further steps can I take to troubleshoot this short of installing debugging symbols?
Ilya Kogan