<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Hi,</div><div><br></div><div>I have a question about the IPA-AD trust scenario where POSIX attributes are store in AD. </div><div><br data-mce-bogus="1"></div><div>I would like to know if it's possible to store public SSH user key in Active Directory in some user's object attribute - the same way as uidNumber or loginShell. I can't find any suitable attribute for ssh in AD schema but the uidNumber,gidNumber and others are already presented (win2012).<br></div><div><br data-mce-bogus="1"></div><div>So is there any chance to extend AD schema and let the IPA server get public ssh user's key from AD the same way as other POSIX attributes ? Is it IPA ready for that and how that attribute should be named in AD ? </div><div><br data-mce-bogus="1"></div><div>Thanks, </div><div><br data-mce-bogus="1"></div><div>Jan </div></div></body></html>