[Freeipa-users] Installed OpenSSH server does not support dynamically loading authorized user keys - no key login support

[Rob Crittenden]

Vaclav Adamec wrote:
> Hi,
>  I'm getting "Installed OpenSSH server does not support dynamically
> loading authorized user keys. Public key authentication of IPA users
> will not be available" during ipa client install on CentOS 6.6
> 
> Packages openssh-server-6.1p1-5.el6.1.x86_64 and
> ipa-client-3.0.0-42.el6.centos.x86_64
> 
> Manual setup of  "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys"
> in /etc/ssh/sshd_config is ok.
> 
> Any reason for that ?
>

I'd check the client install log for more details,
/var/log/ipaclient-install.log

A number of different permutations are tried and the log should have
more details on which ones failed (and hopefully why).

rob