Re: [Freeipa-users] [freeipa-users] errors when trying to add public SSH key to user

[Armstrong, Kenneth Lawrence]

On Mon, 2013-07-15 at 18:25 +0100, James Hogarth wrote:



ipa-server-2.2.0-17.el6_3.1.x86_64







Think I see the problem here 


From the 3.0 release notes:

  *   SSH public key format has been changed to OpenSSH-style public keys.


http://www.freeipa.org/page/IPAv3_300_ga



You really ought to get those servers updated to RHEL 6.4 with IPA 3.0 (which 
is part of 6.4) ...



Ok, we'll go through an upgrade first then try it again.  Thanks!
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] [freeipa-users] errors when trying to add public SSH key to user

[James Hogarth]

ipa-server-2.2.0-17.el6_3.1.x86_64
>
>
>

Think I see the problem here 

>From the 3.0 release notes:

   - SSH public key format has been changed to OpenSSH-style public keys.


http://www.freeipa.org/page/IPAv3_300_ga

You really ought to get those servers updated to RHEL 6.4 with IPA 3.0
(which is part of 6.4) ...
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] [freeipa-users] errors when trying to add public SSH key to user

[Armstrong, Kenneth Lawrence]

ipa-server-2.2.0-17.el6_3.1.x86_64

-Kenny

On Mon, 2013-07-15 at 17:41 +0200, Tomas Babej wrote:
On Monday 15 of July 2013 15:36:46 Armstrong, Kenneth Lawrence wrote:

> I do not believe that it is damaged. I have tried this out three times now 
> (deleting the key files between each attempt).

>

> -Kenny



What is the version of your IPA server?



Tomas


___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] [freeipa-users] errors when trying to add public SSH key to user

[Tomas Babej]

On Monday 15 of July 2013 15:36:46 Armstrong, Kenneth Lawrence wrote:
> I do not believe that it is damaged.  I have tried this out three times now 
> (deleting the key files between each attempt).
> 
> -Kenny

What is the version of your IPA server?

Tomas___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] [freeipa-users] errors when trying to add public SSH key to user

[Armstrong, Kenneth Lawrence]

I do not believe that it is damaged.  I have tried this out three times now 
(deleting the key files between each attempt).

-Kenny

On Mon, 2013-07-15 at 17:30 +0200, Tomas Babej wrote:
On Monday 15 of July 2013 15:13:49 Armstrong, Kenneth Lawrence wrote:

> Good thought. I just tried it and it still fails:

>

> [karmstrong@linuxtest ~]$ ipa user-mod 
> karmstrong --sshpubkey "$(cat .ssh/id_rsa.pub)"

> ipa: ERROR: invalid 'sshpubkey': invalid SSH public key

>



Are you sure the ssh public key file is not damaged? The following sequence of 
commands works for me (verified now):



[root@vm-154 tbabej]# ssh-keygen

Generating public/private rsa key pair.

Enter file in which to save the key (/root/.ssh/id_rsa): /home/tbabej/test_rsa

[..]



[root@vm-154 tbabej]# ipa user-mod admin --sshpubkey "$(cat test_rsa.pub)"

-

Modified user "admin"

-

User login: admin

Last name: Administrator

Home directory: /home/admin

Login shell: /bin/bash

[..]



Tomas


___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] [freeipa-users] errors when trying to add public SSH key to user

[Tomas Babej]

On Monday 15 of July 2013 15:13:49 Armstrong, Kenneth Lawrence wrote:
> Good thought.  I just tried it and it still fails:
> 
> [karmstrong@linuxtest ~]$ ipa user-mod 
> karmstrong --sshpubkey "$(cat .ssh/id_rsa.pub)"
> ipa: ERROR: invalid 'sshpubkey': invalid SSH public key
> 

Are you sure the ssh public key file is not damaged? The following sequence of 
commands works for me (verified now):

[root@vm-154 tbabej]# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): /home/tbabej/test_rsa
[..]

[root@vm-154 tbabej]# ipa user-mod admin --sshpubkey "$(cat test_rsa.pub)"
-
Modified user "admin"
-
  User login: admin
  Last name: Administrator
  Home directory: /home/admin
  Login shell: /bin/bash
[..]

Tomas___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] [freeipa-users] errors when trying to add public SSH key to user

[Armstrong, Kenneth Lawrence]

Good thought.  I just tried it and it still fails:

[karmstrong@linuxtest ~]$ ipa user-mod karmstrong 
--sshpubkey "$(cat .ssh/id_rsa.pub)"
ipa: ERROR: invalid 'sshpubkey': invalid SSH public key


On Mon, 2013-07-15 at 17:09 +0200, Jan Pazdziora wrote:


On Mon, Jul 15, 2013 at 02:40:19PM +, Armstrong, Kenneth Lawrence wrote:
> I'm trying to add an SSH public key to a user, and I keep getting IPA Error 
> 3009 or IPA Error 3008 when I try to update the page.  I have copied over the 
> exact contents of the .ssh/id_rsa.pub file.  Even if I take the username 
> portion out at the end of the file, I still get the same error messages.
>
> When I try to add it from the command line, I get:
>
> ipa: ERROR: invalid 'sshpubkey': invalid SSH public key
>
> And yes, I verified that ssh-rsa is at the beginning of the key output.
>
> This is on a RHEL 6 server.
>
> Any thoughts?

Does it fail even if you do not copy-n-paste the key but let shell
expand it as

ipa user-mod demo --sshpubkey "$( cat /tmp/demo.pub )"

?



--

Kenny Armstrong
System Administrator
IS Operations

[http://www.liberty.edu/media/1616/40themail/wordmark-for-email.jpg]

Training Champions for Christ since 1971
<>___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] [freeipa-users] errors when trying to add public SSH key to user

[Jan Pazdziora]

On Mon, Jul 15, 2013 at 02:40:19PM +, Armstrong, Kenneth Lawrence wrote:
> I'm trying to add an SSH public key to a user, and I keep getting IPA Error 
> 3009 or IPA Error 3008 when I try to update the page.  I have copied over the 
> exact contents of the .ssh/id_rsa.pub file.  Even if I take the username 
> portion out at the end of the file, I still get the same error messages.
> 
> When I try to add it from the command line, I get:
> 
> ipa: ERROR: invalid 'sshpubkey': invalid SSH public key
> 
> And yes, I verified that ssh-rsa is at the beginning of the key output.
> 
> This is on a RHEL 6 server.
> 
> Any thoughts?

Does it fail even if you do not copy-n-paste the key but let shell
expand it as

ipa user-mod demo --sshpubkey "$( cat /tmp/demo.pub )"

?

-- 
Jan Pazdziora | adelton at #ipa*, #brno
Principal Software Engineer, Identity Management Engineering, Red Hat

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users