I've tested your key on a fresh install of ipa-server-3.0.0-25.el6.x86_64 and it works for me. On the other hand, the description of the problem looks like a Web UI bug.


Is it possible, that you recently upgraded IPA server and Web browser still contains some old files in a cache? Please try reloading the UI with forced cache override, usual shortcut: Ctrl + F5 or Ctrl + Shift + R

Petr

On 07/17/2013 03:04 PM, Armstrong, Kenneth Lawrence wrote:
Thanks Petr,

I am 100% positive that I pressed 'Set' and not 'Cancel'.

Here are the exact steps and keys I used:

Generate an ssh public key (for user):

ssh-keygen -t rsa -C karmstr...@liberty.edu<mailto:karmstr...@liberty.edu>

Cat out the key, paste into web interface for user:

cat .ssh/id_rsa.pub
ssh-rsa 
AAAAB3NzaC1yc2EAAAABIwAAAQEA8EDvuInIneXbzg9WrkLKBkVHB0O6bAPjNMF4dTyOqdwX2HDLtLVcW4VY7/03p6xOc014z3rio4GWXa3Othkf5/hqhpQR1C4CUGgSnnUVC7gw/aI9ZpFbp9UGQdEw7E6ii1qDmoyH80wA0pSMfp/Tg19mdm/3GKNqeNCtkpEyMQXyPBeNk0Xba4RXpGio98LOyOxONrYPi4/eR15vzoinBebDN4URAuUgNUxpRrrZp4cWV6W5Bu1zhKblPcAd6jP8qDv/Uty8Jew3GSRo7uZhxzPQQrw+0wBXrUSffPDEe5FH7gPy74J/EfHGtmhbThrrJQ5tmSuqiZnvbnxc3fv6ew==
 karmstr...@liberty.edu<mailto:karmstr...@liberty.edu>


Web interface says that the key is set

Click Update on web interface, get IPA Error 4202 "no modifications to be 
performed"


Skip the web interface, try from command line, appears to succeed:

[karmstrong@linuxclient<mailto:karmstrong@linuxclient> ~]$ ipa user-mod karmstrong 
--sshpubkey="ssh-rsa 
AAAAB3NzaC1yc2EAAAABIwAAAQEA8EDvuInIneXbzg9WrkLKBkVHB0O6bAPjNMF4dTyOqdwX2HDLtLVcW4VY7/03p6xOc014z3rio4GWXa3Othkf5/hqhpQR1C4CUGgSnnUVC7gw/aI9ZpFbp9UGQdEw7E6ii1qDmoyH80wA0pSMfp/Tg19mdm/3GKNqeNCtkpEyMQXyPBeNk0Xba4RXpGio98LOyOxONrYPi4/eR15vzoinBebDN4URAuUgNUxpRrrZp4cWV6W5Bu1zhKblPcAd6jP8qDv/Uty8Jew3GSRo7uZhxzPQQrw+0wBXrUSffPDEe5FH7gPy74J/EfHGtmhbThrrJQ5tmSuqiZnvbnxc3fv6ew==
 karmstr...@liberty.edu<mailto:karmstr...@liberty.edu>"
--------------------------
Modified user "karmstrong"
--------------------------
   User login: karmstrong
   First name: Kenneth
   Last name: Armstrong
   Home directory: /import/is/users/karmstrong
   Login shell: /bin/bash
   UID: 1838200001
   GID: 1838200001
   Account disabled: False
   SSH public key: ssh-rsa
                   
AAAAB3NzaC1yc2EAAAABIwAAAQEA8EDvuInIneXbzg9WrkLKBkVHB0O6bAPjNMF4dTyOqdwX2HDLtLVcW4VY7/03p6xOc014z3rio4GWXa3Othkf5/hqhpQR1C4CUGgSnnUVC7gw/aI9ZpFbp9UGQdEw7E6ii1qDmoyH80wA0pSMfp/Tg19mdm/3GKNqeNCtkpEyMQXyPBeNk0Xba4RXpGio98LOyOxONrYPi4/eR15vzoinBebDN4URAuUgNUxpRrrZp4cWV6W5Bu1zhKblPcAd6jP8qDv/Uty8Jew3GSRo7uZhxzPQQrw+0wBXrUSffPDEe5FH7gPy74J/EfHGtmhbThrrJQ5tmSuqiZnvbnxc3fv6ew==
                   karmstr...@liberty.edu
   Password: True
   Member of groups: ipausers, linux_admin, gensys
   Member of Sudo rule: sudo-all
   Kerberos keys available: True
   SSH public key fingerprint: 51:B0:DC:AD:B3:33:5F:DE:39:6C:6E:4F:35:E1:A4:90 
karmstr...@liberty.edu (ssh-rsa)



Double check the web interface, says that No Key is Set

Followed same procedure for a host, got the same exact results.

Tried to ssh as the user to the host that has keys set via command line, get 
the message that the keys could not be validated.

Thanks.

-Kenny

On Wed, 2013-07-17 at 10:33 +0200, Petr Vobornik wrote:


On 07/16/2013 07:24 PM, Armstrong, Kenneth Lawrence wrote:
Hello all,

i have a new problem with the SSH Key bit in the web interface.  I created a 
new ssh key for a user, and pasted it into the web interface for the user.  
Afterward, it said that the key was not set.  So I attempted again from the 
commandline, and it looks like it took it.  However, when I go back to the web 
interface, it doesn't show one set for the user.

I logged out of the interface and back in, but same story.

Running IPA server 3.0 on RHEL 6.4.

Any thoughts?

-Kenny


Hello Kenny,

When SSH Public keys field in Web UI displays: "New: key not set" it
means that the key was not set in 'Show/Set key' dialog. In other words
you did not paste anything into the textarea or you pressed 'Cancel'
button instead of 'Set' button.

If something is pasted and confirmed by 'Set' button it displays: 'New:
key set'. The last remaining step is to click on 'Update' button on the
header part of the page to confirm and perform all the changes you made
on the page.

When keys are set in LDAP you should see a line similar to following for
each key:
"13:67:6B:BF:4E:A2:05:8E:AE:25:8B:A1:31:DE:6F:1B public key test (ssh-rsa)"
Each fingerprint is followed by 'Show/Set key' and 'Delete' buttons.

I can't comment the CLI part without more information: key and exact
command you used.

HTH




--
Petr Vobornik

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to