In the ipaclient-install.log I see:
2016-12-14T14:58:10Z DEBUG stderr=
2016-12-14T14:58:10Z DEBUG Backing up system configuration file
'/etc/ssh/ssh_config'
2016-12-14T14:58:10Z DEBUG Saving Index File to
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2016-12-14T14:58:10Z INFO Configured /etc/ssh/ssh_config
2016-12-14T14:58:10Z DEBUG Backing up system configuration file
'/etc/ssh/sshd_config'
2016-12-14T14:58:10Z DEBUG Saving Index File to
'/var/lib/ipa-client/sysrestore/sysrestore.index'
2016-12-14T14:58:10Z DEBUG Starting external process
2016-12-14T14:58:10Z DEBUG args=sshd -t -f /dev/null -o
AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys -o
AuthorizedKeysCommandUser=nobody
2016-12-14T14:58:10Z DEBUG Process finished, return code=1
2016-12-14T14:58:10Z DEBUG stdout=
2016-12-14T14:58:10Z DEBUG stderr=command-line: line 0: Bad configuration
option: AuthorizedKeysCommand^M
2016-12-14T14:58:10Z DEBUG Starting external process
2016-12-14T14:58:10Z DEBUG args=sshd -t -f /dev/null -o
AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys -o
AuthorizedKeysCommandRunAs=nobody
2016-12-14T14:58:10Z DEBUG Process finished, return code=1
2016-12-14T14:58:10Z DEBUG stdout=
2016-12-14T14:58:10Z DEBUG stderr=command-line: line 0: Bad configuration
option: AuthorizedKeysCommand^M
2016-12-14T14:58:10Z DEBUG Starting external process
2016-12-14T14:58:10Z DEBUG args=sshd -t -f /dev/null -o
PubKeyAgent=/usr/bin/sss_ssh_authorizedkeys %u -o PubKeyAgentRunAs=nobody
2016-12-14T14:58:10Z DEBUG Process finished, return code=1
2016-12-14T14:58:10Z DEBUG stdout=
2016-12-14T14:58:10Z DEBUG stderr=command-line: line 0: Bad configuration
option: PubKeyAgent^M
2016-12-14T14:58:10Z WARNING Installed OpenSSH server does not support
dynamically loading authorized user keys. Public key authentication of IPA
users will not be available.
From: James Harrison <[email protected]>
To: "[email protected]" <[email protected]>
Sent: Wednesday, 14 December 2016, 15:18
Subject: Free IPA Openssh client install error
Hi,I installed the freeipa client on an Ubuntu Precise system (12.04)
I get the following message at the end of the install:
"Installed OpenSSH server does not support dynamically loading authorized user
keys. Public key authentication of IPA users will not be available."
Any clues? Is there a fix?
Best regards,James Harrison
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
