This is because the optional AuthorizedKeysCommandRunAs option has been changed to mandatory AuthorizedKeysCommandUSer option. The AuthorizedKeysCommandUser option should be set for both new client installs and on client updates.
Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=953617 (Fedora)
There should be a conditional compilation of this fix for the later version of the client not to break the older clients.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=955694
Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 3.2 - 2013/04-05 (GA)
to comment on this ticket.