Setting user ssh keys under freeipa

ipa.md

Set a ssh public key

-sh-4.2$ ls
id_rsa_github2.pub  id_rsa_github.pub
-sh-4.2$ ipa user-mod jhoblitt-comcam --sshpubkey="$(cat id_rsa_github.pub)"
-------------------------------
Modified user "jhoblitt-comcam"
-------------------------------
  User login: jhoblitt-comcam
  First name: Joshua
  Last name: Hoblitt
  Home directory: /home/jhoblitt-comcam
  Login shell: /bin/sh
  Principal name: jhoblitt-comcam@LSST.CLOUD
  Principal alias: jhoblitt-comcam@LSST.CLOUD
  Email address: jhoblitt-comcam@lsst.cloud
  UID: 70003
  GID: 70003
  SSH public key: ssh-rsa
                  AAAAB3NzaC1yc2EAAAADAQABAAABAQCSktxAqLJWTUX63vNrJKyyJWxgtO/3DmRPy7KqDlLko+NAGvk2boc0KkZpD44aPsBxfZnl5gKuRQXb71gMoHk7qF5XsT/DTHxadhtWTSZiHfhZJ4CrkHuiu/8HGUbp5ENrIYIqhyhN5PydJyEW5NfPvRg7n2O5XXZENq+KtxMqBujuXzm9HOese8FTck3nlUnkqz3ObNRyeOCqIXPNukpRDSNRrFY7D8P2Y1/QLeixPzXd6pMkra9gnOPjrs/X9z2lGRaiyhMrraPtBWMlgf2dnN/PjC38T8vC0/xZq0P1N9G5n0swNe961Xr74/gsFvoh004A1aerWhcFnk1+yf79
                  jhoblitt@cpan.org
  SSH public key fingerprint: SHA256:K86MSMXHSAyb6KyeNk5AFmvf9huRSvrdhnsQZBl+MDg jhoblitt@cpan.org (ssh-rsa)
  Account disabled: False
  Password: True
  Member of groups: comcam, comcam-sudo, ipausers
  Indirect Member of Sudo rule: comcam-sudo
  Indirect Member of HBAC rule: comcam-users
  Kerberos keys available: True

Set multiple ssh public keys

Note that mutiple public keys must all be specified at the same time

-sh-4.2$ ipa user-mod jhoblitt-comcam --sshpubkey="$(cat id_rsa_github.pub)" --sshpubkey="$(cat id_rsa_github2.pub)"
-------------------------------
Modified user "jhoblitt-comcam"
-------------------------------
  User login: jhoblitt-comcam
  First name: Joshua
  Last name: Hoblitt
  Home directory: /home/jhoblitt-comcam
  Login shell: /bin/sh
  Principal name: jhoblitt-comcam@LSST.CLOUD
  Principal alias: jhoblitt-comcam@LSST.CLOUD
  Email address: jhoblitt-comcam@lsst.cloud
  UID: 70003
  GID: 70003
  SSH public key: ssh-rsa
                  AAAAB3NzaC1yc2EAAAADAQABAAABAQCSktxAqLJWTUX63vNrJKyyJWxgtO/3DmRPy7KqDlLko+NAGvk2boc0KkZpD44aPsBxfZnl5gKuRQXb71gMoHk7qF5XsT/DTHxadhtWTSZiHfhZJ4CrkHuiu/8HGUbp5ENrIYIqhyhN5PydJyEW5NfPvRg7n2O5XXZENq+KtxMqBujuXzm9HOese8FTck3nlUnkqz3ObNRyeOCqIXPNukpRDSNRrFY7D8P2Y1/QLeixPzXd6pMkra9gnOPjrs/X9z2lGRaiyhMrraPtBWMlgf2dnN/PjC38T8vC0/xZq0P1N9G5n0swNe961Xr74/gsFvoh004A1aerWhcFnk1+yf79
                  jhoblitt@cpan.org, ssh-rsa
                  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
                  github2
  SSH public key fingerprint: SHA256:K86MSMXHSAyb6KyeNk5AFmvf9huRSvrdhnsQZBl+MDg jhoblitt@cpan.org (ssh-rsa), SHA256:IjMngxilL0FA8+f3MBHBTYK92aEX0rceI6EXGq2aWRU github2 (ssh-rsa)
  Account disabled: False
  Password: True
  Member of groups: comcam, comcam-sudo, ipausers
  Indirect Member of Sudo rule: comcam-sudo
  Indirect Member of HBAC rule: comcam-users
  Kerberos keys available: True

Delete all ssh public keys

-sh-4.2$ ipa user-mod jhoblitt-comcam --sshpubkey=
-------------------------------
Modified user "jhoblitt-comcam"
-------------------------------
  User login: jhoblitt-comcam
  First name: Joshua
  Last name: Hoblitt
  Home directory: /home/jhoblitt-comcam
  Login shell: /bin/sh
  Principal name: jhoblitt-comcam@LSST.CLOUD
  Principal alias: jhoblitt-comcam@LSST.CLOUD
  Email address: jhoblitt-comcam@lsst.cloud
  UID: 70003
  GID: 70003
  Account disabled: False
  Password: True
  Member of groups: comcam, comcam-sudo, ipausers
  Indirect Member of Sudo rule: comcam-sudo
  Indirect Member of HBAC rule: comcam-users
  Kerberos keys available: True