From 68ae773dc6d50f747937b8b21f1826c181a565fc Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Mon, 18 Jan 2021 15:51:28 -0800
Subject: [PATCH] basessh: in stg setup sssd/ipa to handle ssh keys

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 roles/basessh/templates/sshd_config | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/roles/basessh/templates/sshd_config b/roles/basessh/templates/sshd_config
index f87c137137..3e52530532 100644
--- a/roles/basessh/templates/sshd_config
+++ b/roles/basessh/templates/sshd_config
@@ -54,6 +54,9 @@ AcceptEnv XMODIFIERS
 # For repospanner/git
 AuthorizedKeysCommandUser git
 AuthorizedKeysCommand /usr/libexec/pagure/keyhelper.py "%u" "%h" "%t" "%f"
+{% elif env == 'staging' and not sshd_keyhelper %}
+AuthorizedKeysCommandUser nobody
+AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys
 {% endif %}