<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 04/17/2014 02:42 PM, quest monger
wrote:<br>
</div>
<blockquote
cite="mid:CAO-=20_Wo+9f_3FO=sAPT1Do_uinMJYhk4=rMMfVaD8j9MACmQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>I have setup <span class="">freeipa</span> server, and
added a <span class="">centos</span> client that my <span
class="">ipa</span> users can now ssh too by using the <span
class="">freeipa</span> account credentials.</div>
<div>Now, i would like my users to be able to ssh to this <span
class="">centos</span> client using keys.</div>
<div>I read this - <a moz-do-not-send="true" href="http://docs">http://docs</a>.<span
class="">fedoraproject</span>.org/en-US/Fedora/18/html/<span
class="">FreeIPA</span>_Guide/user-keys.html</div>
<div>I generated the key-pair, and added the public key to user
account in <span class="">freeipa</span> web console.</div>
<div><br>
</div>
<div> Towards the end of that document, i found this - </div>
"After uploading the user keys, configure <span class="">SSSD</span>
to use <span class="">FreeIPA</span> as one of its identity
domains and set up <span class="">OpenSSH</span> to use the <span
class="">SSSD</span> tooling for managing user keys."<br>
<div>No instructions in the document on how to do this. <br>
</div>
<div><br>
</div>
<div>Do i need to do anything on the <span class="">centos</span>
client-side to make this work?<br>
</div>
<div>
<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
yum install ipa-client<br>
<br>
then run ipa-client-install with arguments you need (see man pages
or manual) which will configure your client. Depending on the
version it will also be able to configure SSH integration.<br>
<br>
See man on ipa-client-install <br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>