sss_ssh_authorizedkeys issues

[Daniel Jung]

Hi,

I see that it was added in 2012 in Feb. So i assume version forward from
1.8.0 will support this?

I am running 1.9.2 on centos, installed from the centos repo.

I added ldap_user_ssh_public_key = sshPublicKey to my LDAP domain and i can
see it being loaded in the sss_LDAP.log after setting debug_level = 10

I tried doing creating [ssh] in hopes of getting more detailed log when
running sss_ssh_authorizedkeys ${id} but dont see anything ...

The error i get is "Error looking up public keys"  I have sshPublicKey set
and can be queried using ldapsearch uid=${id} sshPublicKey

What am i overlooking?

Cheers

[Lukas Slebodnik]

On (11/06/14 14:24), Daniel Jung wrote:
> Hi,
>
> I see that it was added in 2012 in Feb. So i assume version forward from
> 1.8.0 will support this?
>
> I am running 1.9.2 on centos, installed from the centos repo.
>
> I added ldap_user_ssh_public_key = sshPublicKey to my LDAP domain and i can
> see it being loaded in the sss_LDAP.log after setting debug_level = 10
>
> I tried doing creating [ssh] in hopes of getting more detailed log when
> running sss_ssh_authorizedkeys ${id} but dont see anything ...
>
> The error i get is "Error looking up public keys"  I have sshPublicKey set
> and can be queried using ldapsearch uid=${id} sshPublicKey
>
> What am i overlooking?

http://www.freeipa.org/images/1/10/Freeipa30_SSSD_OpenSSH_integration.pdf

Slides 14-17

LS

[Daniel Jung]

Awesome -- was missing ssh in the service section under [sssd]
Could you confirm on the release of the version that support this feature?
1.8.0 sounds reasonable?

Cheers

On Wed, Jun 11, 2014 at 2:50 PM, Lukas Slebodnik 
wrote:
> On (11/06/14 14:24), Daniel Jung wrote:
> > Hi,
> >
> > I see that it was added in 2012 in Feb. So i assume version forward from
> > 1.8.0 will support this?
> >
> > I am running 1.9.2 on centos, installed from the centos repo.
> >
> > I added ldap_user_ssh_public_key = sshPublicKey to my LDAP domain and i
>
> can
> > see it being loaded in the sss_LDAP.log after setting debug_level = 10
> >
> > I tried doing creating [ssh] in hopes of getting more detailed log when
> > running sss_ssh_authorizedkeys ${id} but dont see anything ...
> >
> > The error i get is "Error looking up public keys"  I have sshPublicKey set
> > and can be queried using ldapsearch uid=${id} sshPublicKey
> >
> > What am i overlooking?
>
> http://www.freeipa.org/images/1/10/Freeipa30_SSSD_OpenSSH_integration.pdf
>
> Slides 14-17
>
> LS
> _______________________________________________
> sssd-users mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users

[Dmitri Pal]

On 06/11/2014 08:56 AM, Daniel Jung wrote:
> Awesome -- was missing ssh in the service section under [sssd]
> Could you confirm on the release of the version that support this 
> feature? 1.8.0 sounds reasonable?

It started in 1.8 but was not completely polished.
In 1.9 it is stable.
> Cheers
>
> On Wed, Jun 11, 2014 at 2:50 PM, Lukas Slebodnik <[e-mail] 
> > wrote:
> On (11/06/14 14:24), Daniel Jung wrote:
> >Hi,
> >
> >I see that it was added in 2012 in Feb. So i assume version
> forward from
> >1.8.0 will support this?
> >
> >I am running 1.9.2 on centos, installed from the centos repo.
> >
> >I added ldap_user_ssh_public_key = sshPublicKey to my LDAP domain
> and i can
> >see it being loaded in the sss_LDAP.log after setting debug_level
> = 10
> >
> >I tried doing creating [ssh] in hopes of getting more detailed
> log when
> >running sss_ssh_authorizedkeys ${id} but dont see anything ...
> >
> >The error i get is "Error looking up public keys"  I have
> sshPublicKey set
> >and can be queried using ldapsearch uid=${id} sshPublicKey
> >
> >What am i overlooking?
> >
> http://www.freeipa.org/images/1/10/Freeipa30_SSSD_OpenSSH_integration.pdf
>
> Slides 14-17
>
> LS
> _______________________________________________
> sssd-users mailing list
> [e-mail]
> <mailto:[e-mail]>
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
>
>
>
> sssd-users mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users