sss_ssh_authorizedkeys issues

[Daniel Jung]

Hi,

I see that it was added in 2012 in Feb. So i assume version forward from
1.8.0 will support this?

I am running 1.9.2 on centos, installed from the centos repo.

I added ldap_user_ssh_public_key = sshPublicKey to my LDAP domain and i can
see it being loaded in the sss_LDAP.log after setting debug_level = 10

I tried doing creating [ssh] in hopes of getting more detailed log when
running sss_ssh_authorizedkeys ${id} but dont see anything ...

The error i get is "Error looking up public keys"  I have sshPublicKey set
and can be queried using ldapsearch uid=${id} sshPublicKey

What am i overlooking?

Cheers

[Lukas Slebodnik]

On (11/06/14 14:24), Daniel Jung wrote:
> Hi,
>
> I see that it was added in 2012 in Feb. So i assume version forward from
> 1.8.0 will support this?
>
> I am running 1.9.2 on centos, installed from the centos repo.
>
> I added ldap_user_ssh_public_key = sshPublicKey to my LDAP domain and i can
> see it being loaded in the sss_LDAP.log after setting debug_level = 10
>
> I tried doing creating [ssh] in hopes of getting more detailed log when
> running sss_ssh_authorizedkeys ${id} but dont see anything ...
>
> The error i get is "Error looking up public keys"  I have sshPublicKey set
> and can be queried using ldapsearch uid=${id} sshPublicKey
>
> What am i overlooking?
>  
http://www.freeipa.org/images/1/10/Freeipa30_SSSD_OpenSSH_integration.pdf

Slides 14-17

LS

[Daniel Jung]

Awesome -- was missing ssh in the service section under [sssd]
Could you confirm on the release of the version that support this feature?
1.8.0 sounds reasonable?

Cheers


On Wed, Jun 11, 2014 at 2:50 PM, Lukas Slebodnik <lslebodn(a)redhat.com&gt;
wrote:

>  On (11/06/14 14:24), Daniel Jung wrote:
>  >Hi,
>  >
>  >I see that it was added in 2012 in Feb. So i assume version forward from
>  >1.8.0 will support this?
>  >
>  >I am running 1.9.2 on centos, installed from the centos repo.
>  >
>  >I added ldap_user_ssh_public_key = sshPublicKey to my LDAP domain and i
>  can
>  >see it being loaded in the sss_LDAP.log after setting debug_level = 10
>  >
>  >I tried doing creating [ssh] in hopes of getting more detailed log when
>  >running sss_ssh_authorizedkeys ${id} but dont see anything ...
>  >
>  >The error i get is "Error looking up public keys"  I have sshPublicKey set
>  >and can be queried using ldapsearch uid=${id} sshPublicKey
>  >
>  >What am i overlooking?
>  >
>  http://www.freeipa.org/images/1/10/Freeipa30_SSSD_OpenSSH_integration.pdf
>
>  Slides 14-17
>
>  LS
>  _______________________________________________
>  sssd-users mailing list
>  sssd-users(a)lists.fedorahosted.org
>  https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>

[Dmitri Pal]

On 06/11/2014 08:56 AM, Daniel Jung wrote:
>  Awesome -- was missing ssh in the service section under [sssd]
>  Could you confirm on the release of the version that support this 
>  feature? 1.8.0 sounds reasonable? 
It started in 1.8 but was not completely polished.
In 1.9 it is stable.

>  Cheers
>
>
>  On Wed, Jun 11, 2014 at 2:50 PM, Lukas Slebodnik <lslebodn(a)redhat.com 
>  <mailto:[e-mail]>> wrote:
>
>      On (11/06/14 14:24), Daniel Jung wrote:
>      >Hi,
>      >
>      >I see that it was added in 2012 in Feb. So i assume version
>      forward from
>      >1.8.0 will support this?
>      >
>      >I am running 1.9.2 on centos, installed from the centos repo.
>      >
>      >I added ldap_user_ssh_public_key = sshPublicKey to my LDAP domain
>      and i can
>      >see it being loaded in the sss_LDAP.log after setting debug_level
>      = 10
>      >
>      >I tried doing creating [ssh] in hopes of getting more detailed
>      log when
>      >running sss_ssh_authorizedkeys ${id} but dont see anything ...
>      >
>      >The error i get is "Error looking up public keys"  I have
>      sshPublicKey set
>      >and can be queried using ldapsearch uid=${id} sshPublicKey
>      >
>      >What am i overlooking?
>      >
>      http://www.freeipa.org/images/1/10/Freeipa30_SSSD_OpenSSH_integration.pdf
>
>      Slides 14-17
>
>      LS
>      _______________________________________________
>      sssd-users mailing list
>      sssd-users(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>      https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
>
>
>
>  _______________________________________________
>  sssd-users mailing list
>  sssd-users(a)lists.fedorahosted.org
>  https://lists.fedorahosted.org/mailman/listinfo/sssd-users 

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.