SSSD / sssd

#1949 SSH host keys are not removed from cache when host is deleted in IPA
Closed: Fixed Opened by jcholast.

Closed: Fixed
Reopen Issue

If a host is deleted in IPA, its host keys stay in SSSD's cache. This can lead to ssh refusing to connect to a host after reinstall, because its new host keys do not match those provided by SSSD.

Aren't the key refreshed on a new connect ?

Usually yes, but they are not when the host entry in LDAP is gone.

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.10.0

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=969024

rhbz: => [https://bugzilla.redhat.com/show_bug.cgi?id=969024 969024]

Fields changed

changelog: =>
patch: 0 => 1
status: new => assigned

Under review upstream but Honza is currently busy with other tasks. Moving to 1.10.1

milestone: SSSD 1.10.0 => SSSD 1.10.1
  • master: 7b1f8721183647546e0da1aa458c02495f84a995

milestone: SSSD 1.10.1 => SSSD 1.10.0

Fields changed

resolution: => fixed
status: assigned => closed

Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: SSSD 1.10.0

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/2991

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
defect
SSSD
1.9.5
0
1
https://bugzilla.redhat.com/show_bug.cgi?id=969024
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.