[Freeipa-users] Not able to replicate user keys across master and client

[hirofumi.morikawa at accenture.com]

Hi Free IPA team

Let me further clarify the question that is asked by Niraj below.

Currently, we have 1 master FreeIPA server and 1 client server. Evaluating your product for production deployment
Master and client connectivity is established and when creating the user in the web console, it is indeed creating the user in the client machine

However, When we add public key through the web console below, this key is not created(or transfered) to the client machine(checked by logging into the
server) that blocks the key based access to this machine

[cid:image003.jpg at 01D26CCB.55E68FA0]


Could you please let us know if this key is supposed to be created to the client machine natively with FreeIPA
when registering the key through the console above?  Are we missing any configuration to enable this
key registration to client machine? Thank you for your response in advance

Best regards

Hirofumi Morikawa
Accenture
Certified Technology Architect - Emerging Technologies group
Email : hirofumi.morikawa at accenture.com<mailto:hirofumi.morikawa at accenture.com>
Mobile phone : +33 (0)6 82 10 81 88

From: Singh, NirajKumar
Sent: mardi 10 janvier 2017 10:38
To: freeipa-users at redhat.com
Cc: Morikawa, Hirofumi; Shyam Gupta, Upendra
Subject: Not able to replicate user keys across master and client

Hi Team,

We have Created PPK key for the user on master FreeIPA server  which is there in /home/user/.ssh/authorized_keys file.

But the key are not reflecting in client machine.

Please suggest so that authorized_keys file added automatically in client as soon as it gets created in master server.

Thanks,
Niraj

________________________________

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.
______________________________________________________________________________________

www.accenture.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170112/16b47e10/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 31919 bytes
Desc: image003.jpg
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170112/16b47e10/attachment.jpg>