#!/bin/bash
# AuthorizedKeysCommand: emit a user's SSH public keys from kanidm, then
# from systemd-userdb. Always exit 0 — sshd still consults
# AuthorizedKeysFile (~/.ssh/authorized_keys) and password auth, so a
# failure here never blocks a login.
/usr/bin/kanidm_ssh_authorizedkeys "$1" 2>/dev/null
/usr/bin/userdbctl ssh-authorized-keys "$1" 2>/dev/null
exit 0
