#1897 Autenticity of ipa server can't be established
Closed: Fixed None Opened 9 years ago by jcholast.

Ticket was cloned from Red Hat Bugzilla (product Fedora): Bug 955499

Description of problem:
When trying to ssh from client to server "The authenticity of host
'f19.skynet.com (<no hostip for proxy command>)' can't be established." message

According test case:
https://fedoraproject.org/wiki/QA:Testcase_FreeIPA_realmd_ssh this message
shouldn't appear.

Version-Release number of selected component (if applicable):

Steps to Reproduce:
Follow TC mentined above.

Additional info:
When I'm trying to login from server to client no such message appear. I
*think* this is caused by fact that dns entry for client contains it's
fingerprint and there no such entries for server (f19.skynet.com is server,
client.skynet.com is client:

# dig +short f19.skynet.com SSHFP
# dig +short client.skynet.com SSHFP
1 2 2CBA4EC2AE01ABF71EBB25B0EE47A3B2E0F117779C4C905DDCD4D7A1 FD56111F
1 1 D0B62584C00E6196F0ABD49B8E4C064A8E3748A7
2 2 023CD7E56786856567CC627F91F7C8E3A12A85B948161B9BA7F934AD C568EE65
2 1 BFF6CD508443FA7581745C77CE13AD5958E106EA

Fields changed

blockedby: =>
blocking: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
owner: somebody => jcholast
review: True => 0
selected: =>
status: new => assigned
testsupdated: => 0

Fields changed

patch: 0 => 1

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.10 beta

resolution: => fixed
status: assigned => closed

Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: SSSD 1.10 beta

5 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/2939

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.