[SSSD-users] sss_ssh_authorizedkeys issues

Dmitri Pal dpal at redhat.com
Wed Jun 11 17:30:53 UTC 2014


On 06/11/2014 08:56 AM, Daniel Jung wrote:
> Awesome -- was missing ssh in the service section under [sssd]
> Could you confirm on the release of the version that support this 
> feature? 1.8.0 sounds reasonable?

It started in 1.8 but was not completely polished.
In 1.9 it is stable.

>
> Cheers
>
>
> On Wed, Jun 11, 2014 at 2:50 PM, Lukas Slebodnik <lslebodn at redhat.com 
> <mailto:lslebodn at redhat.com>> wrote:
>
>     On (11/06/14 14:24), Daniel Jung wrote:
>     >Hi,
>     >
>     >I see that it was added in 2012 in Feb. So i assume version
>     forward from
>     >1.8.0 will support this?
>     >
>     >I am running 1.9.2 on centos, installed from the centos repo.
>     >
>     >I added ldap_user_ssh_public_key = sshPublicKey to my LDAP domain
>     and i can
>     >see it being loaded in the sss_LDAP.log after setting debug_level
>     = 10
>     >
>     >I tried doing creating [ssh] in hopes of getting more detailed
>     log when
>     >running sss_ssh_authorizedkeys ${id} but dont see anything ...
>     >
>     >The error i get is "Error looking up public keys"  I have
>     sshPublicKey set
>     >and can be queried using ldapsearch uid=${id} sshPublicKey
>     >
>     >What am i overlooking?
>     >
>     http://www.freeipa.org/images/1/10/Freeipa30_SSSD_OpenSSH_integration.pdf
>
>     Slides 14-17
>
>     LS
>     _______________________________________________
>     sssd-users mailing list
>     sssd-users at lists.fedorahosted.org
>     <mailto:sssd-users at lists.fedorahosted.org>
>     https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
>
>
>
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140611/ceb9e5ce/attachment.html>


More information about the sssd-users mailing list