Guys, we have updated the system to 1.15.0 version and this fixed the issue Thank you all ;-)
*Artem Golubev* System Administrator *(exp)capital limited* On 21 March 2017 at 19:26, Artem Golubev <artem.golu...@expcapital.com> wrote: > yep, Ubuntu 16.04.2 > > *Artem Golubev* > System Administrator > *(exp)capital limited* > > On 21 March 2017 at 19:13, Vasily Yanov <vasily.ya...@expcapital.com> > wrote: > >> Hi Lukas, >> >> You are right :) Ubuntu 16.04. >> >> -----Original Message----- >> From: Lukas Slebodnik [mailto:lsleb...@redhat.com] >> Sent: Tuesday, March 21, 2017 7:03 PM >> To: Alexander Bokovoy <aboko...@redhat.com> >> Cc: freeipa-users@redhat.com; Artem Golubev <artem.golu...@expcapital.com >> >; IT Team <i...@expcapital.com> >> Subject: Re: [Freeipa-users] Certificate Access issue >> >> On (21/03/17 17:35), Alexander Bokovoy wrote: >> >On ti, 21 maalis 2017, Lukas Slebodnik wrote: >> >> On (21/03/17 16:29), Alexander Bokovoy wrote: >> >> > On ti, 21 maalis 2017, Artem Golubev wrote: >> >> > > We use sssd version 1.13.4 on our linux clients A user from ipa >> >> > > successfully authorizes on a linux client via ssh without a >> >> > > certificate. But then if we add a certificate - connection gets >> lost. >> >> > If Lukas is correct, 1.13.4 does not have the fix for broken >> >> > certificate-as-ssh public key: >> >> > >> >> It has. >> >> https://pagure.io/SSSD/sssd/issue/2977#comment-222198 >> >> https://pagure.io/SSSD/sssd/c/4dbb3bec93cda57e8336847dff0822f31425004 >> >> d >> >> >> >> It will be part of upstream release 1.13.5 >> >That's my point -- it is *not* part of 1.13.4, therefore, this is the >> >problem Artem sees. >> > >> >Artem, what is your Linux distribution? Can you move to a newer version? >> > >> I would gues ubuntu :-) >> >> You might file a bug to your distribution to backport patch from the >> ticket https://pagure.io/SSSD/sssd/issue/2977 >> >> LS >> >> >
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
