freeipa

#8400 sshd template file is installed in a wrong (server) location while used by the client side
Closed: fixed by frenaud. Opened by abbra.

Closed: fixed
Reopen Issue

With commit 3cf9979aec109e01ee470c22fbc7ca55bd8c2eb0 we now expect sshd_ipa.conf.template to be present on the client for ipa-client-install to operate:

commit 3cf9979aec109e01ee470c22fbc7ca55bd8c2eb0
Author: Florence Blanc-Renaud <flo@redhat.com>
Date:   Thu Jun 11 21:08:36 2020 +0200
    ipa-client-install: use sshd drop-in configuration

However, since all files in install/share/sshd_ipa.conf.template actually packaged in freeipa-server-common, it is not available on the client:

....
2020-07-09T08:08:37     Enrolled in IPA realm IPA.TEST
2020-07-09T08:08:37     Created /etc/ipa/default.conf
2020-07-09T08:08:37     Configured sudoers in /etc/authselect/user-nsswitch.conf
2020-07-09T08:08:37     Configured /etc/sssd/sssd.conf
2020-07-09T08:08:37     Configured /etc/krb5.conf for IPA realm IPA.TEST
2020-07-09T08:08:37     Systemwide CA database updated.
2020-07-09T08:08:37     Hostname (client.ipa.test) does not have A/AAAA record.
2020-07-09T08:08:37     Incorrect reverse record(s):
2020-07-09T08:08:37     10.0.105.255 is pointing to ci-vm-10-0-105-255.hosted.upshift.rdu2.redhat.com. instead of client.ipa.test.
2020-07-09T08:08:37     Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub
2020-07-09T08:08:37     Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
2020-07-09T08:08:37     Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub
2020-07-09T08:08:37     Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub
2020-07-09T08:08:37     WARNING: The configuration pre-client installation is not managed by authselect and cannot be backed up. Uninstallation may not be able to revert to the original state.
2020-07-09T08:08:37     SSSD enabled
2020-07-09T08:08:37     Configured /etc/openldap/ldap.conf
2020-07-09T08:08:37     Configured /etc/ssh/ssh_config
2020-07-09T08:08:37     [Errno 2] No such file or directory: '/usr/share/ipa/sshd_ipa.conf.template'
2020-07-09T08:08:37     The ipa-client-install command failed. See /var/log/ipaclient-install.log for more information

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4903

master:

  • 797a64b370fad5a0a26ebeeb3e4f34c3c88c0096 sshd template must be part of client package

ipa-4-8:

  • 668fdc63e3e886208dca8bdc5a68a20972150985 sshd template must be part of client package

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
https://github.com/freeipa/freeipa/pull/4903
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.