[SSSD] OpenSSH-LPK support

Dmitri Pal dpal at redhat.com
Wed Oct 3 12:05:28 UTC 2012


On 10/03/2012 08:04 AM, Jan Cholasta wrote:
> On 3.10.2012 13:29, Jakub Hrozek wrote:
>> On Wed, Oct 03, 2012 at 12:09:58PM +0200, Jan Cholasta wrote:
>>> Hi,
>>>
>>> now that SSSD supports OpenSSH formatted public keys, the
>>> OpenSSH-LPK <http://code.google.com/p/openssh-lpk/> schema is
>>> automatically supported as well in the LDAP provider. All you have
>>> to do is to set the ldap_user_ssh_public_key option in your LDAP
>>> domain section of sssd.conf to sshPublicKey.
>>>
>>> Currently there is no default value for ldap_user_ssh_public_key in
>>> LDAP domains. Does it make sense to make sshPublicKey the default
>>> value for it?
>>>
>>> Honza
>>
>> What would be the scope of the changes?
>>
>> Would the change amount to just adding the attribute and the default
>> value?
>
> The attribute is in the user attribute map, but it has no default
> value. So the only change is adding a default value (and updating the
> documentation accordingly).
>
> Honza
>
This needs to be a separate ticket and go via triage cycle. It is one of
those "minor" fixes with big implications. I personally agree with the
intent but let us follow the process here and check opinion of others.

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/






More information about the sssd-devel mailing list