[Freeipa-users] SSSD client (amazon linux) + IPA server (Redhat)

[Jakub Hrozek]

On Sat, Sep 19, 2015 at 06:32:40AM -0700, Gustavo Mateus wrote:
> I've already included that in the IPA permissions.
> Anonymous access to ipaSshPubKey is marked as public already. Read and
> Search is allowed.

as your ldapsearch proved, it's still not working. If you search the
server logs, you might see what exact attributes were requested and
whether they were permitted.

(Requesting just the single attribute might make the server logs a bit
more readable)