freeipa

#9649 Also enable SSSD's ssh service when enabling sss_ssh_knownhosts
Closed: fixed by frenaud. Opened by allopez.

Closed: fixed
Reopen Issue

Request for enhancement

As a SSSD developer, I want ipa-client-install to enable SSSD's ssh service when enabling the use of sss_ssh_knownhosts so that this tool works properly.

Issue

If the ssh service is not enabled, the tool will fail to retrieve the keys and abort the ssh connection.

Steps to Reproduce

  1. Disable ssh in SSSD.
  2. Run ipa-client-install to enable sss_ssh_knownhosts

Actual behavior

ssh localhost fails.

Expected behavior

ssh should succeed.

Version/Release/Distribution

ipa-client-4.12.1-4.el10.x86_64

Additional info:

For this you need to update the /etc/sssd/sssd.conf file and modify the services option in the [sssd] section, to include the value ssh. This is a list of comma-separated values.

[sssd]
domains = EXAMPLE.TEST
services = nss, ssh, pam, sudo, ifp

Metadata Update from @ftrivino:
- Issue assigned to ftrivino

hi @allopez thanks for filing the ticket, I'll send a patch soon.

Metadata Update from @ftrivino:
- Assignee reset

Metadata Update from @ftrivino:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7492

Metadata Update from @ftrivino:
- Issue assigned to ftrivino

master:

  • 2cb6e446dd3b6d9bda33635c1ca832148251f9bf Installer: activate ssh service in sssd.conf

ipa-4-12:

  • 373d41f211c1a04dc432a068bc7d2ba825ff554c Installer: activate ssh service in sssd.conf

ipa-4-11:

  • 97aec5f36dd6558326b69fd60927014bae9e87d4 Installer: activate ssh service in sssd.conf

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-59266

master:

  • c37f4d09e2c97ee90a0acebf2c3bc30fed4e85ad ipatests: Activate ssh in sssd.conf

Metadata Update from @frenaud:
- Custom field test_coverage adjusted to test_integration/test_installation_client.py::TestInstallClient::test_check_ssh_service_is_activated

ipa-4-12:

  • 761647f842567713032709753b6d63467d9871a6 ipatests: Activate ssh in sssd.conf

ipa-4-11:

  • 0b32572703e5201b878c9d86921906d3866a09b9 ipatests: Activate ssh in sssd.conf
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.