Central key admin/authorization (CA, LDAP, etc.)

In the distributed computing (cluster computing) environment we have, there is a need for users to transfer files from any one machine to any other machine. We're talking about a few hundred machines here (and many users as well), and a heterogeneous environment at that (SGI IRIX, Solaris, HP-UX, Linux, Windows 2K). I want to be have these file transfers occur securely via SSH/SCP (we use OpenSSH), but am running into a scalability issue w.r.t. key management, where each machine has to have the public keys of users on other hosts. Well, you get the idea...

Is there a way to integrate OpenSSH with some centralized authentication point (e.g. Certificate Authority, or LDAP, or ...) which will help mitigate this scalability issue? This has become a headache, so any info/advice that would lead to a solution would be greatly appreciated.

--john Received on Fri Mar 14 16:44:24 2003