[Freeipa-users] Free IPA Openssh client install error

James Harrison jamesaharrisonuk at yahoo.co.uk
Wed Dec 14 15:47:52 UTC 2016


In the ipaclient-install.log I see:

2016-12-14T14:58:10Z DEBUG stderr=
2016-12-14T14:58:10Z DEBUG Backing up system configuration file '/etc/ssh/ssh_config'
2016-12-14T14:58:10Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
2016-12-14T14:58:10Z INFO Configured /etc/ssh/ssh_config
2016-12-14T14:58:10Z DEBUG Backing up system configuration file '/etc/ssh/sshd_config'
2016-12-14T14:58:10Z DEBUG Saving Index File to '/var/lib/ipa-client/sysrestore/sysrestore.index'
2016-12-14T14:58:10Z DEBUG Starting external process
2016-12-14T14:58:10Z DEBUG args=sshd -t -f /dev/null -o AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys -o AuthorizedKeysCommandUser=nobody
2016-12-14T14:58:10Z DEBUG Process finished, return code=1
2016-12-14T14:58:10Z DEBUG stdout=
2016-12-14T14:58:10Z DEBUG stderr=command-line: line 0: Bad configuration option: AuthorizedKeysCommand^M

2016-12-14T14:58:10Z DEBUG Starting external process
2016-12-14T14:58:10Z DEBUG args=sshd -t -f /dev/null -o AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys -o AuthorizedKeysCommandRunAs=nobody
2016-12-14T14:58:10Z DEBUG Process finished, return code=1
2016-12-14T14:58:10Z DEBUG stdout=
2016-12-14T14:58:10Z DEBUG stderr=command-line: line 0: Bad configuration option: AuthorizedKeysCommand^M

2016-12-14T14:58:10Z DEBUG Starting external process
2016-12-14T14:58:10Z DEBUG args=sshd -t -f /dev/null -o PubKeyAgent=/usr/bin/sss_ssh_authorizedkeys %u -o PubKeyAgentRunAs=nobody
2016-12-14T14:58:10Z DEBUG Process finished, return code=1
2016-12-14T14:58:10Z DEBUG stdout=
2016-12-14T14:58:10Z DEBUG stderr=command-line: line 0: Bad configuration option: PubKeyAgent^M

2016-12-14T14:58:10Z WARNING Installed OpenSSH server does not support dynamically loading authorized user keys. Public key authentication of IPA users will not be available.



      From: James Harrison <jamesaharrisonuk at yahoo.co.uk>
 To: "freeipa-users at redhat.com" <freeipa-users at redhat.com> 
 Sent: Wednesday, 14 December 2016, 15:18
 Subject: Free IPA Openssh client install error
   
Hi,I installed the freeipa client on an Ubuntu Precise system (12.04)

I get the following message at the end of the install:
"Installed OpenSSH server does not support dynamically loading authorized user keys. Public key authentication of IPA users will not be available."

Any clues? Is there a fix?

Best regards,James Harrison


   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20161214/be3e5b2b/attachment.htm>


More information about the Freeipa-users mailing list