This is because the optional AuthorizedKeysCommandRunAs option has been changed to mandatory AuthorizedKeysCommandUSer option. The AuthorizedKeysCommandUser option should be set for both new client installs and on client updates.
Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=953617 (Fedora)
There should be a conditional compilation of this fix for the later version of the client not to break the older clients.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=955694
master: ddd8988
ipa-3-1: 47f701c
Metadata Update from @jcholast: - Issue assigned to jcholast - Issue set to the milestone: FreeIPA 3.2 - 2013/04-05 (GA)
Login to comment on this ticket.