3:53 a.m.
Hi all.
Is there any way to get the user's ssh key (not fingerprint) via console?
Maybe LDAP?
Or only via a https request ?
Thanks
--
Best regards
Maciej Drobniuch
Network Security Engineer
Collective-Sense,LLC
4:07 a.m.
On ti, 16 tammi 2018, Maciej Drobniuch via FreeIPA-users wrote:
Hi all.
Is there any way to get the user's ssh key (not fingerprint) via console?
Maybe LDAP?
Or only via a https request ?
Do you mean a public ssh key associated with a user
with the help of
'ipa user-mod foo --sshpubkey=...'?
An easiest way to read the keys would be using 'sss_ssh_authorized_keys' utility:
$ sss_ssh_authorizedkeys admin
ssh-rsa AAAAB....
--
/ Alexander Bokovoy
4:08 a.m.
On Tue, Jan 16, 2018 at 10:53:21AM +0100, Maciej Drobniuch via FreeIPA-users wrote:
Hi all.
Is there any way to get the user's ssh key (not fingerprint) via console?
if the key is store in IPA you can get the full key with
ipa user-show --all username
or
sss_ssh_authorizedkeys username
The latter might show ssh keys from idoverrides or derived from user
certificates as well.
HTH
bye,
Sumit
Maybe LDAP?
Or only via a https request ?
Thanks
--
Best regards
Maciej Drobniuch
Network Security Engineer
Collective-Sense,LLC
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
6:25 a.m.
Yes,
This is what I needed.
Thank You guys :)
Best
Maciej
On Tue, Jan 16, 2018 at 11:08 AM, Sumit Bose via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
On Tue, Jan 16, 2018 at 10:53:21AM +0100, Maciej Drobniuch via
FreeIPA-users wrote:
> Hi all.
>
> Is there any way to get the user's ssh key (not fingerprint) via console?
if the key is store in IPA you can get the full key with
ipa user-show --all username
or
sss_ssh_authorizedkeys username
The latter might show ssh keys from idoverrides or derived from user
certificates as well.
HTH
bye,
Sumit
>
> Maybe LDAP?
>
> Or only via a https request ?
>
> Thanks
>
> --
> Best regards
>
> Maciej Drobniuch
> Network Security Engineer
> Collective-Sense,LLC
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.
fedorahosted.org
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
--
Best regards
Maciej Drobniuch
Network Security Engineer
Collective-Sense,LLC
2286
days inactive
2286
days old
freeipa-users@lists.fedorahosted.org
3 comments
3 participants
participants (3)
-
Alexander Bokovoy -
Maciej Drobniuch -
Sumit Bose