[SSSD] OpenSSH-LPK support

Jan Cholasta jcholast at redhat.com
Wed Oct 3 13:19:10 UTC 2012


On 3.10.2012 14:05, Dmitri Pal wrote:
> On 10/03/2012 08:04 AM, Jan Cholasta wrote:
>> On 3.10.2012 13:29, Jakub Hrozek wrote:
>>> On Wed, Oct 03, 2012 at 12:09:58PM +0200, Jan Cholasta wrote:
>>>> Hi,
>>>>
>>>> now that SSSD supports OpenSSH formatted public keys, the
>>>> OpenSSH-LPK <http://code.google.com/p/openssh-lpk/> schema is
>>>> automatically supported as well in the LDAP provider. All you have
>>>> to do is to set the ldap_user_ssh_public_key option in your LDAP
>>>> domain section of sssd.conf to sshPublicKey.
>>>>
>>>> Currently there is no default value for ldap_user_ssh_public_key in
>>>> LDAP domains. Does it make sense to make sshPublicKey the default
>>>> value for it?
>>>>
>>>> Honza
>>>
>>> What would be the scope of the changes?
>>>
>>> Would the change amount to just adding the attribute and the default
>>> value?
>>
>> The attribute is in the user attribute map, but it has no default
>> value. So the only change is adding a default value (and updating the
>> documentation accordingly).
>>
>> Honza
>>
> This needs to be a separate ticket and go via triage cycle. It is one of
> those "minor" fixes with big implications. I personally agree with the
> intent but let us follow the process here and check opinion of others.
>

https://fedorahosted.org/sssd/ticket/1560

-- 
Jan Cholasta



More information about the sssd-devel mailing list