freeipa

#9688 F40 -> F41 Upgrade: GlobalKnownHostsFile is commented and re-added in 04-ipa.conf
Closed: invalid by rcritten. Opened by amessina.

Closed: invalid
Reopen Issue

See #9536 https://bugzilla.redhat.com/show_bug.cgi?id=2305856#c4. After the F40 -> F41 upgrade, my 04-ipa.conf contains the following. This occurred on all machines I have upgraded.

# IPA-related configuration changes to ssh_config
# added by ipa-client update
GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts/
#
PubkeyAuthentication yes
# disabled by ipa-client update
# GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts
VerifyHostKeyDNS yes
# assumes that if a user does not have shell (/sbin/nologin),
# this will return nonzero exit code and proxy command will be ignored
Match exec true
        # replaced by ipa-client update
    # replaced by ipa-client update
    KnownHostsCommand /usr/bin/sss_ssh_knownhosts %H

See https://pagure.io/freeipa/issue/9536

Metadata Update from @rcritten:
- Issue close_status updated to: invalid
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.