RHEL 6 - AuthorizedKeysCommandRunAs

[rdrgmnzs]

RHEL 6 - AuthorizedKeysCommandRunAs

[ghoneycutt]

Do you know if this is specific to EL6 or to all versions of OpenSSH >= X ?

If the configuration parameters are equivalent and just named differently for different versions, then a conditional in the template is a good call as you suggested.

Thanks!

[rdrgmnzs]

I don't know if it is EL6 or to all versions of OpenSSH >= X ?, I'll do some testing in the upcoming days and let you know.

Yep the configuration parameters are equivalent and just named differently.

[ghoneycutt]

More information is needed to address this. I am unsure as to why the commands are different. Did this happen in a version of OpenSSH?

[aholen]

This changed in OpenSSH 6.2 (or possibly in openssh 6.1p1):
https://bugzilla.redhat.com/show_bug.cgi?id=953534

6.2 or higher should use: AuthorizedKeysCommandUser
<6.2 should use: AuthorizedKeysCommandRunAs

[ghoneycutt]

Thanks @aholen

We should be able to use a conditional on the ssh_version_numeric fact to solve this.

[cjedwa]

@ghoneycutt

This seems like an actual issue. Can we get this re-opened? I can provide examples of failure on RHEL6 if it helps.

[Phil-Friderici]

In v4 AuthorizedKeysCommandUser is nativly supported. To use AuthorizedKeysCommandRunAs you can use the $custom parameter.
Please re-open if this doesn't fit your use case.