[Freeipa-users] Issues with FreeIPA SSH Key authentication

2016-09-07 Thread Venkataramana Kintali
Hi, Of late, I am learning FreeIPA . I have installed IPA server and few clients (Version 3.0.0) I am facing an issue with ssh key authentication in my setup. I generated a putty ssh private key (using putty keygen) ,and uploaded it under a user through IPA GUI. I am able to login to some IPA clien

Re: [Freeipa-users] Issues with FreeIPA SSH Key authentication

2016-09-07 Thread Venkataramana Kintali
On Sep 7, 2016 8:09 PM, "Venkataramana Kintali" < venkataramana.kint...@gmail.com> wrote: > > Hi, > Of late, I am learning FreeIPA . I have installed IPA server and few clients (Version 3.0.0) > I am facing an issue with ssh key authentication in my setup. > I generated a putty ssh private key (usi

Re: [Freeipa-users] Issues with FreeIPA SSH Key authentication

2016-09-09 Thread Lukas Slebodnik
On (07/09/16 17:39), Venkataramana Kintali wrote: >Hi, >Of late, I am learning FreeIPA . I have installed IPA server and few >clients (Version 3.0.0) >I am facing an issue with ssh key authentication in my setup. >I generated a putty ssh private key (using putty keygen) ,and uploaded it >under a us

Re: [Freeipa-users] Issues with FreeIPA SSH Key authentication

2016-09-15 Thread Venkataramana Kintali
Hi Lukas, Thank you for responding. I compared the configs.(sshd_config and sssd.conf ),they are same. sssd and sshd services are running on all the servers(IPA clients). PubKey Authentication is enabled on all the servers. I am not able to login with sshkeys. But I am able to ssh to these server

Re: [Freeipa-users] Issues with FreeIPA SSH Key authentication

2016-09-15 Thread Lukas Slebodnik
On (15/09/16 09:56), Venkataramana Kintali wrote: >Hi Lukas, >Thank you for responding. >I compared the configs.(sshd_config and sssd.conf ),they are same. Is /etc/ssh/ssh_config the same as well? NOTE: (ssh_config is not the same as sshd_config //extra 'd' in name) >sssd and sshd services are ru

Re: [Freeipa-users] Issues with FreeIPA SSH Key authentication

2016-09-15 Thread Venkataramana Kintali
Hi Lukas, ssh_config is also same on all servers. Our need is to do it both ways, to be able to login with ssh public keys(uploaded in IPA) and disable password login, and be able to access allhosts within the same IPA domain silently from any host. Hoping the configs will help, I am including the

Re: [Freeipa-users] Issues with FreeIPA SSH Key authentication

2016-09-16 Thread Lukas Slebodnik
On (15/09/16 11:46), Venkataramana Kintali wrote: >Hi Lukas, >ssh_config is also same on all servers. >Our need is to do it both ways, to be able to login with ssh public >keys(uploaded in IPA) and disable password login, and be able to access >allhosts within the same IPA domain silently from any

Re: [Freeipa-users] Issues with FreeIPA SSH Key authentication

2016-09-20 Thread Venkataramana Kintali
Thank you Lukas. The issue , not being able to login to some servers in our setup with ssh keys, was due to incorrect permissions on /usr directory,per the following entry in /var/log/secure. *sshd[12856]: error: bad ownership or modes for AuthorizedKeysCommand path component "/usr"* After settin