[Freeipa-users] Certificate Access issue

[Vasily Yanov]

Hi Lukas,

You are right :) Ubuntu 16.04.

-----Original Message-----
From: Lukas Slebodnik [mailto:lslebodn at redhat.com] 
Sent: Tuesday, March 21, 2017 7:03 PM
To: Alexander Bokovoy <abokovoy at redhat.com>
Cc: freeipa-users at redhat.com; Artem Golubev <artem.golubev at expcapital.com>; IT Team <it at expcapital.com>
Subject: Re: [Freeipa-users] Certificate Access issue

On (21/03/17 17:35), Alexander Bokovoy wrote:
>On ti, 21 maalis 2017, Lukas Slebodnik wrote:
>> On (21/03/17 16:29), Alexander Bokovoy wrote:
>> > On ti, 21 maalis 2017, Artem Golubev wrote:
>> > > We use sssd version 1.13.4 on our linux clients A user from ipa 
>> > > successfully authorizes on a linux client via ssh without a 
>> > > certificate. But then if we add a certificate - connection gets lost.
>> > If Lukas is correct, 1.13.4 does not have the fix for broken 
>> > certificate-as-ssh public key:
>> > 
>> It has.
>> https://pagure.io/SSSD/sssd/issue/2977#comment-222198
>> https://pagure.io/SSSD/sssd/c/4dbb3bec93cda57e8336847dff0822f31425004
>> d
>> 
>> It will be part of upstream release 1.13.5
>That's my point -- it is *not* part of 1.13.4, therefore, this is the 
>problem Artem sees.
>
>Artem, what is your Linux distribution? Can you move to a newer version?
>
I would gues ubuntu :-)

You might file a bug to your distribution to backport patch from the ticket https://pagure.io/SSSD/sssd/issue/2977

LS