<div class="gmail_quote">2013/3/19 Jakub Hrozek <span dir="ltr"><<a href="mailto:jhrozek@redhat.com" target="_blank">jhrozek@redhat.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On Tue, Mar 19, 2013 at 07:15:21PM +0100, Jakub Hrozek wrote:<br>
> On Tue, Mar 19, 2013 at 01:56:20PM -0400, Mathieu Lemoine wrote:<br>
> > Hello,<br>
> ><br>
> > I have sssd 1.9.4 (from<br>
> > <a href="https://launchpad.net/~nicholas-hatch/+archive/auth/+packages" target="_blank">https://launchpad.net/~nicholas-hatch/+archive/auth/+packages</a>) configured<br>
> > on an OpenLDAP server.<br>
> > getent passwd, getent group, authentication and cache is working great.<br>
> ><br>
> > My issue now lies with the SSH public key.<br>
> ><br>
> > My user has the ldapPublicKey objectClass, and the key is in the<br>
> > sshPublicKey attribute.<br>
> ><br>
> > sss_ssh_authorizedkeys is still returning "Error looking up public keys".<br>
> > An inquiry on the #sssd chan directed me to this mailing-list and more<br>
> > precisely to jcholast, I tried to check out the commits, but nothing seems<br>
> > to get out of it...<br>
><br>
> Full disclosure: I was the one who redirected Mathieu to you, Honza :-)<br>
><br>
> ><br>
> > If any of you had informations regarding that, it'd be greatly appreciated.,<br>
> > Mathieu.<br>
><br>
> I think as a first step, it would be nice to put debug_level=8 into the<br>
> [ssh] section of the sssd.conf file, restart the SSSD and then attach<br>
> the ssh responder logs (/var/log/sssd/sssd_nss.log).<br>
<br>
</div> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>
Sorry, this is a copy-n-paste error. The *ssh* responder log is located<br>
at:<br>
/var/log/sssd/sssd_ssh.log<br>
<br>
The path I copied was the *nss* responder log. Sorry again.<br></blockquote><div> </div></div>Ok, so first point, I didn't know I needed a sss responder for ssh (not mentionned anywhere as far as I know). Thanks for this.<br>
I added ", ssh" to the "services" line and restarted sssd.<br><br>sss_ssh.log stays hopelessly empty even with debug_level 10 and I still have the sshPublicKey is not available in sss_office.log<br><br>
However sss_ssh_authorizedkeys now doesn't return any error, just a big nothing...<br><br>Attached is the ldif of my user (I removed any sensitive information, anyway, the entry has been fetched using anonymous access, so passwords and such has been left aside.<br>