[Freeipa-users] Certificate Access issue

[Artem Golubev]

Guys, we have updated the system to 1.15.0 version and this fixed the issue
Thank you all ;-)

*Artem Golubev*
System Administrator
*(exp)capital limited*

On 21 March 2017 at 19:26, Artem Golubev <artem.golubev at expcapital.com>
wrote:

> yep, Ubuntu 16.04.2
>
> *Artem Golubev*
> System Administrator
> *(exp)capital limited*
>
> On 21 March 2017 at 19:13, Vasily Yanov <vasily.yanov at expcapital.com>
> wrote:
>
>> Hi Lukas,
>>
>> You are right :) Ubuntu 16.04.
>>
>> -----Original Message-----
>> From: Lukas Slebodnik [mailto:lslebodn at redhat.com]
>> Sent: Tuesday, March 21, 2017 7:03 PM
>> To: Alexander Bokovoy <abokovoy at redhat.com>
>> Cc: freeipa-users at redhat.com; Artem Golubev <artem.golubev at expcapital.com
>> >; IT Team <it at expcapital.com>
>> Subject: Re: [Freeipa-users] Certificate Access issue
>>
>> On (21/03/17 17:35), Alexander Bokovoy wrote:
>> >On ti, 21 maalis 2017, Lukas Slebodnik wrote:
>> >> On (21/03/17 16:29), Alexander Bokovoy wrote:
>> >> > On ti, 21 maalis 2017, Artem Golubev wrote:
>> >> > > We use sssd version 1.13.4 on our linux clients A user from ipa
>> >> > > successfully authorizes on a linux client via ssh without a
>> >> > > certificate. But then if we add a certificate - connection gets
>> lost.
>> >> > If Lukas is correct, 1.13.4 does not have the fix for broken
>> >> > certificate-as-ssh public key:
>> >> >
>> >> It has.
>> >> https://pagure.io/SSSD/sssd/issue/2977#comment-222198
>> >> https://pagure.io/SSSD/sssd/c/4dbb3bec93cda57e8336847dff0822f31425004
>> >> d
>> >>
>> >> It will be part of upstream release 1.13.5
>> >That's my point -- it is *not* part of 1.13.4, therefore, this is the
>> >problem Artem sees.
>> >
>> >Artem, what is your Linux distribution? Can you move to a newer version?
>> >
>> I would gues ubuntu :-)
>>
>> You might file a bug to your distribution to backport patch from the
>> ticket https://pagure.io/SSSD/sssd/issue/2977
>>
>> LS
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170322/34a30405/attachment.htm>