[Freeipa-users] RHEL5 clients not getting ssh key

[Lukas Slebodnik]

On (30/04/15 15:34), Jakub Hrozek wrote:
>On Thu, Apr 30, 2015 at 03:13:44PM +0200, Martin Kosek wrote:
>> On 04/30/2015 02:56 PM, Aric Wilisch wrote:
>> > Is there a trick to getting a users SSH key that’s attached to their FreeIPA account to work on RHEL 5 servers? users can ssh into the RHEL 6 clients with no issues but they still get prompted for their passwords on the RHEL 5 server, so it’s not pushing down their ssh keys. 
>> > 
>> > Thanks!
>> > 
>> > Regards,
>> > ------------------------------------------
>> > Aric Wilisch
>> > awilisch at gmail.com
>> 
>> Well, RHEL-5's latest build should be sssd-1.5.1-71.el5, but the SSH public key
>> support was added in SSSD 1.8:
>> 
>> https://fedorahosted.org/sssd/ticket/610
>> 
>> So I do not know any way besides upgrading to RHEL-6/RHEL-7 or backporting the
>> SSSD 1.8+ yourself (which I do not expect to be an easy task).
>
>The 1.9 branch should build and work on RHEL-5.
>
But IIRC openssh-server should be patched as well.

LS