[SSSD-users] sss_ssh_authorizedkeys returns "Error looking up public keys"

Stephen Gallagher sgallagh at redhat.com
Tue Mar 19 19:03:44 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/19/2013 02:27 PM, Mathieu Lemoine wrote:



According to your configuration, SSSD is connecting anonymously to the
LDAP server (you don't have a bind user or password configured). Can
you install the openldap-clients package (or whatever its equivalent
is for Ubuntu) and run the following command:

ldapsearch -x -H ldap://ldap.office \
    -b cn=users,dc=ldap,dc=office \
    "(uid=mlemoine)" \
    sshPublicKey

My guess is that the sshPublicKey attribute will not be returned
because the anonymous user is unlikely to have access to it. The
solution to this would be to set the bind user for LDAP to an account
that does have this privilege (or change the ACLs on the server so
that the anonymous user can read that attribute.

If it *is* returned, then there's a different problem.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlFItpAACgkQeiVVYja6o6O4egCgkgxSUXEx43kzELR/Le90leZK
4awAoJ4fHOOOgR4qsNw/XLkmz1g+RNe7
=IGMr
-----END PGP SIGNATURE-----


More information about the sssd-users mailing list