freeipa

#9316 Passwordless (GSSAPI) SSH login with AD user
Closed: fixed by rcritten. Opened by amore.

Closed: fixed
Reopen Issue

[Add test for passwordless (GSSAPI) SSH login with AD user into root , sub and tree domain.]

Steps to Reproduce

  1. Configure ipa-server with AD trust established.
  2. AD domain is windows.test and a child domain sub1.windows.test contains the user aduser1
  3. Obtain a kerberos ticket for aduser1@sub1.windows.test and use this ticket for ssh

Expected behavior

echo Secret123|kinit aduser1@SUB1.WINDOWS.TEST
Password for aduser1@SUB1.WINDOWS.TEST:
ssh -K -l aduser1@SUB1.WINDOWS.TEST hostname 'echo Success'
Success

The fix that should be tested: https://github.com/freeipa/freeipa/pull/6644

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2162656

Issue linked to bug 2162656

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2166324 (was: https://bugzilla.redhat.com/show_bug.cgi?id=2162656)

Issue linked to bug 2166324

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2166324, https://bugzilla.redhat.com/show_bug.cgi?id=2162656 (was: https://bugzilla.redhat.com/show_bug.cgi?id=2166324)

master:

  • 0c32ebf85859858eb27bcc712dfec91e2d1c85d3 ipa-kdb: PAC consistency checker needs to handle child domains as well
  • 0b762d2b2a214cc6a392514e0d82e2c15200082b Add test for SSH with GSSAPI auth.

ipa-4-9:

  • 2d7cc19d238e0a20a44bb5422fd369d1e5cf764f ipa-kdb: PAC consistency checker needs to handle child domains as well
  • ed1959dc0cf8823a0ce60e32ce0de7a389ecb942 Add test for SSH with GSSAPI auth.

ipa-4-10:

  • 0206369eec8530e96c66986c4ca501d8962193ce ipa-kdb: PAC consistency checker needs to handle child domains as well
  • a6cb905de74da38d62f9c3bd7957018924282521 Add test for SSH with GSSAPI auth.

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.