<div dir="ltr"><div class="" style="font-size:16px;border:0px;margin:1em 0px 0px;padding:0px;vertical-align:baseline;color:rgb(0,0,0);font-family:&#39;liberation sans&#39;,&#39;Myriad &#39;,&#39;Bitstream Vera Sans&#39;,&#39;Lucida Grande&#39;,&#39;Luxi Sans&#39;,&#39;Trebuchet MS&#39;,helvetica,verdana,arial,sans-serif;line-height:18.200000762939453px;background-image:initial;background-repeat:initial">
According to the doc, </div><div class="" style="font-size:16px;border:0px;margin:1em 0px 0px;padding:0px;vertical-align:baseline;color:rgb(0,0,0);font-family:&#39;liberation sans&#39;,&#39;Myriad &#39;,&#39;Bitstream Vera Sans&#39;,&#39;Lucida Grande&#39;,&#39;Luxi Sans&#39;,&#39;Trebuchet MS&#39;,helvetica,verdana,arial,sans-serif;line-height:18.200000762939453px;background-image:initial;background-repeat:initial">
In order to manage user keys, SSSD has a tool, <code class="" style="border:0px;margin:0px;padding:0px;vertical-align:baseline;font-family:&#39;liberation mono&#39;,&#39;bitstream vera mono&#39;,&#39;dejavu mono&#39;,monospace;font-weight:bold;white-space:pre-wrap;word-wrap:break-word;background:transparent">sss_ssh_authorizedkeys</code>, which performs two operations:</div>
<div class="" style="font-size:16px;border:0px;margin:0px;padding:0px;vertical-align:baseline;color:rgb(0,0,0);font-family:&#39;liberation sans&#39;,&#39;Myriad &#39;,&#39;Bitstream Vera Sans&#39;,&#39;Lucida Grande&#39;,&#39;Luxi Sans&#39;,&#39;Trebuchet MS&#39;,helvetica,verdana,arial,sans-serif;line-height:18.200000762939453px;background-image:initial;background-repeat:initial">
<ol style="border:0px;margin:1em 0px;padding:0px 0px 0px 40px;vertical-align:baseline;background:none"><li class="" style="border:0px;margin:1em 0px 0px;padding:0px;vertical-align:baseline;background:transparent"><div class="" style="border:0px;margin:1em 0px 0px;padding:0px;vertical-align:baseline;background:transparent">
Retrieves the user&#39;s public key from the user entries in the Identity Management (IPA) domain.</div></li><li class="" style="border:0px;margin:1em 0px 0px;padding:0px;vertical-align:baseline;background:transparent"><div class="" style="border:0px;margin:1em 0px 0px;padding:0px;vertical-align:baseline;background:transparent">
Stores the user key in a custom file, <code class="" style="border:0px;margin:0px;padding:0px;vertical-align:baseline;font-family:&#39;liberation mono&#39;,&#39;bitstream vera mono&#39;,&#39;dejavu mono&#39;,monospace;font-weight:bold;white-space:pre-wrap;word-wrap:break-word;background:transparent">.ssh/sss_authorized_keys</code>, in the standard authorized keys format.</div>
</li></ol><div>So i can get the sss_ssh_authorizedkeys to spit out the publickey, and can auth using it via sshd, however, I do not see <span style="font-family:&#39;liberation mono&#39;,&#39;bitstream vera mono&#39;,&#39;dejavu mono&#39;,monospace;font-weight:bold;white-space:pre-wrap">.ssh/sss_authorized_keys being created under users directory. I even tried creating the file and see if it gets updated. </span></div>
<div>Don&#39;t see anything obvious in the ssh_config that would indicate adding authorized_keys. </div><div>Anyone? </div></div></div>