<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hi,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>We are number of Amazon AMI (Amazon Linux) in AWS. As this is based on RHEL we installed number of packages to enable user on those machine to get authenticated against ipa. The client gets configured with below warning.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>-----------------------------------<br><span style='font-family:"Courier New"'>WARNING Installed OpenSSH server does not support dynamically loading authorized user keys. Public key authentication of IPA users will not be available.</span><br>-----------------------------------<br><br>When user tries to authenticate the SSH connection is dropped, ipa server issues the authentication ticket to the machine.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Packages that has been installed. <o:p></o:p></p><p class=MsoNormal>----------------------------------------------<br><span style='font-family:"Courier New"'>ipa-python-3.0.0-25.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>python-ldap-2.3.10-1.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>cyrus-sasl-gssapi-2.1.23-13.el6_3.1.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>pam_krb5-2.3.11-9.el6.i686.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>sssd-1.9.2-82.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>certmonger-0.61-3.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>oddjob-mkhomedir-0.30-5.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>python-krbV-1.0.90-3.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libsss_autofs-1.9.2-82.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>autofs-5.0.5-73.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>nfs-utils-1.2.3-36.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>sssd-client-1.9.2-82.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>python-kerberos-1.1-6.2.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>python-nss-0.13-1.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>python-lxml-2.2.3-1.1.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>python-netaddr-0.7.5-4.el6.noarch.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>pyOpenSSL-0.10-2.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libipa_hbac-python-1.9.2-82.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libgssglue-0.1-11.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>nfs-utils-lib-1.1.5-6.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>rpcbind-0.2.0-11.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>oddjob-0.30-5.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libipa_hbac-1.9.2-82.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libldb-1.1.13-3.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libsss_idmap-1.9.2-82.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libevent-1.4.13-4.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libtalloc-2.0.7-2.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>keyutils-1.4-4.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libdhash-0.4.2-9.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libtirpc-0.2.1-5.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>ipa-client-3.0.0-25.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libtevent-0.9.17-1.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libtdb-1.2.10-1.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libini_config-0.6.1-9.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libcollection-0.6.0-9.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libpath_utils-0.2.1-9.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libref_array-0.1.1-9.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>c-ares-1.7.0-6.el6.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>samba4-libs-4.0.0-55.el6.rc4.x86_64.rpm<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libnl-1.1-14.el6.x86_64.rpm</span><br>----------------------------------------------<br><br><o:p></o:p></p><p class=MsoNormal>Are there any other package that need to be installed to make it working.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Below is the ssh version.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-family:"Courier New"'># rpm -qa | grep ssh<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>libssh2-1.4.2-1.10.amzn1.x86_64<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>openssh-6.2p2-4.34.amzn1.x86_64<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>openssh-clients-6.2p2-4.34.amzn1.x86_64<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Courier New"'>openssh-server-6.2p2-4.34.amzn1.x86_64<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-GB style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Regards,<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-GB style='font-size:10.0pt;font-family:"Arial","sans-serif";color:purple'><o:p> </o:p></span></b></p><p class=MsoNormal><b><span lang=EN-GB style='font-size:10.0pt;font-family:"Arial","sans-serif";color:purple'>Mohan</span></b><span lang=EN-GB style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>