[SSSD-users] sss_ssh_authorizedkeys returns "Error looking up public keys"

Mathieu Lemoine mlemoine at mlemoine.name
Wed Mar 20 14:41:27 UTC 2013


2013/3/20 Jan Cholasta <jcholast at redhat.com>

> On 20.3.2013 14:02, Pavel Březina wrote:
>
>> On 03/20/2013 01:16 PM, Jakub Hrozek wrote:
>>
>>> On Wed, Mar 20, 2013 at 08:12:33AM -0400, Simo Sorce wrote:
>>>
>>>> On Wed, 2013-03-20 at 10:19 +0100, Pavel Březina wrote:
>>>>
>>>>>
>>>>> Hi,
>>>>> I'm afraid we support ssh keys only with IPA backend at the moment.
>>>>>
>>>>>
>>>> Should we open a RFE to make it available with other backends too ?
>>>>
>>>>
>>> This is already part of https://fedorahosted.org/sssd/**ticket/1560<https://fedorahosted.org/sssd/ticket/1560>it
>>> seems:
>>>
>>> """
>>> In the LDAP provider, ldap_user_ssh_public_key has no default value.
>>> Make sshPublicKey the default value for it, so that OpenSSH-LPK support
>>> is enabled by default.
>>> """
>>>
>>
>> This sounds more like it should work with LDAP provider if you set
>> ldap_user_ssh_public_key to sshPublicKey.
>>
>
> Yes, it should.
>
>
>  But we don't have any support
>> whatsoever. We lack sssm_ldap_hostid_init().
>>
>
> This is completely irrelevant for user public keys support.
>
> Honza
>
> --
> Jan Cholasta
>

Hello,

Thanks for all the messages.
I did add the ldap_user_public_key to sssd.conf, but it doesn't seem to
change anything.

In fact, sshPublicKey isn't even requested during the
ldap_search_ext/sdap_get_generic_ext_step call.

I tried to find information on IPA backend, but it seems quite unclear what
this would be.
Attached is an up-to-date sanitized sssd.conf.

If you have any other insight, I'd be glad to test them or provide
additional informations.

Mathieu.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20130320/b5e1eb35/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sssd.conf
Type: application/octet-stream
Size: 840 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20130320/b5e1eb35/attachment.obj>


More information about the sssd-users mailing list