Bug 636874

Summary:	Directive 'PubkeyAgent' is not allowed within a Match block
Product:	[Fedora] Fedora	Reporter:	Ruben Kerkhof <ruben>
Component:	openssh	Assignee:	Jan F. Chadima <jchadima>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	14	CC:	jchadima, mgrepl, tmraz
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2010-09-24 11:07:05 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ruben Kerkhof 2010-09-23 14:38:19 UTC

Description of problem:

The following configuration used to work for me:

Match Group admins
   PubkeyAgent /usr/libexec/openssh/ssh-ldap-helper -s %u

After and upgrade it now fails with:
Directive 'PubkeyAgent' is not allowed within a Match block

Version-Release number of selected component (if applicable):

openssh-5.5p1-21.fc14.x86_64

Comment 1 Jan F. Chadima 2010-09-24 06:48:01 UTC

As I remember the directive PubkeyAgent does not exist anymore. The correct directive name is AuthorizedKeysCommand.
Plese try it.

Comment 2 Ruben Kerkhof 2010-09-24 11:07:05 UTC

Hi Jan,

That does the trick, thanks.