[Freeipa-users] Cannot add or delete ssh user keys

[Jens Dieskau]

I found the problem and opened a new ticket at 
https://fedorahosted.org/freeipa/ticket/5456

Am 17.11.2015 um 03:56 schrieb Jens Dieskau:
> Hello everybody,
>
> Since the last version of FreeIPA I cannot add or delete any ssh user
> keys for synced users. Neither on commandline nor web ui.
>
> It works flawless with local created users. But it does not work with
> users created by winsync. See error message below.
>
> If I add the ntUser objectClass manually to a local user, it also
> doesn't work any more. Maybe this is somehow the origin of the bug?
> Are there any other logs I could check out?
>
>
> Thanks,
> Jens
>
>
> ipa -vv user-mod name --sshpubkey="ssh-rsa foobar name at host"
> ipa: INFO: trying https://ipa.cs.ucc.md/ipa/session/json
> ipa: INFO: Request: {
>      "id": 0,
>      "method": "ping",
>      "params": [
>          [],
>          {}
>      ]
> }
> ipa: INFO: Response: {
>      "error": null,
>      "id": 0,
>      "principal": "admin at CS.UCC.MD",
>      "result": {
>          "messages": [
>              {
>                  "code": 13001,
>                  "message": "API Version number was not sent, forward
> compatibility not guaranteed. Assuming server's API version, 2.156",
>                  "name": "VersionMissing",
>                  "type": "warning"
>              }
>          ],
>          "summary": "IPA server version 4.2.3. API version 2.156"
>      },
>      "version": "4.2.3"
> }
> ipa: INFO: Forwarding 'user_mod' to json server
> 'https://ipa.cs.ucc.md/ipa/session/json'
> ipa: INFO: Request: {
>      "id": 0,Since the last version of FreeIPA I cannot add or delete any ssh user keys for synced users. Neither on commandline nor web ui.
>      "method": "user_mod",
>      "params": [
>          [
>              "name"
>          ],
>          {
>              "all": false,
>              "ipasshpubkey": [
>                  "ssh-rsa foobar name at host"
>              ],
>              "no_members": false,
>              "random": false,
>              "raw": false,
>              "rights": false,
>              "version": "2.156"
>          }
>      ]
> }
> ipa: INFO: Response: {
>      "error": {
>          "code": 4203,
>          "message": "Type or value exists: ",
>          "name": "DatabaseError"
>      },
>      "id": 0,
>      "principal": "admin at CS.UCC.MD",
>      "result": null,
>      "version": "4.2.3"
> }
> ipa: ERROR: Type or value exists:
>