Return
-
Title
After FIPS is enabled error in messages No repository found in "svn+ssh://pmpolicy.example.com/sudo_repos/trunk -
Description
On Rehat 8.1 client machine, enabled FIPS the plugin client stops working. The syslog file shows the error in messages No repository found in "svn+ssh://pmpolicy.example.com/sudo_repos/trunk sudo not working. pmjoin fails. -
Cause
Product Enhancement Request: 237769 -
Resolution
STATUS: Enhancement Request # 237769 was included in Safeguard for Sudo 7.0.0. 7.0.0 and above will allow ECDSA ssh keys.
WORKAROUND:
For versions lower than 7.0.0 (which includes this Enhancement to allow ECDSA ssh keys): The main issue is the use of ECDSA type keys instead of RSA type keys for ssh. OpenSSH's ssh-keygen command creates RSA type keys by default and this is what we use in Privilege Manager and MCU as well.
Please see How to configure Privilege Manager to use a non-RSA ssh key-type
-
Change Request
237769