[Freeipa-users] Re: sss_ssh_authorizedkeys returns nothing on client

2019-03-11 Thread Sumit Bose via FreeIPA-users
On Thu, Mar 07, 2019 at 05:24:10PM -, Charles Ulrich via FreeIPA-users wrote: > For what it's worth, I have verified that I can run this on the client and it > returns the override object immediately: > > ldapsearch -x -H ldaps://arb-01.engipa.example.com -D 'cn=Directory Manager ' > -W -b

[Freeipa-users] Re: sss_ssh_authorizedkeys returns nothing on client

2019-03-07 Thread Charles Ulrich via FreeIPA-users
For what it's worth, I have verified that I can run this on the client and it returns the override object immediately: ldapsearch -x -H ldaps://arb-01.engipa.example.com -D 'cn=Directory Manager ' -W -b 'cn=Default Trust View,cn=views,cn=accounts,dc=engipa,dc=example,dc=com' -s sub

[Freeipa-users] Re: sss_ssh_authorizedkeys returns nothing on client

2019-03-07 Thread Charles Ulrich via FreeIPA-users
> On Wed, Mar 06, 2019 at 11:24:20PM -, Charles Ulrich via FreeIPA-users > wrote: > > In the log snippet the client runs into a timeout, the IPA server didn't > send a reply for 6s. Since you say that you can authenticate in general > on the client I guess this might only a temporary error

[Freeipa-users] Re: sss_ssh_authorizedkeys returns nothing on client

2019-03-07 Thread Sumit Bose via FreeIPA-users
On Wed, Mar 06, 2019 at 11:24:20PM -, Charles Ulrich via FreeIPA-users wrote: > Hello, good people of FreeIPA-users, > > Short version: > > I've run into an issue where a SSH public key authentication doesn't work on > the FreeIPA client. When I run `sss_ssh_authorizedkeys > ` on the