OpenSSH and LDAP, or CA, or ???

Is it possible to interface/integrate OpenSSH with a centralized authentication scheme (e.g. certificate authority, LDAP, etc.)? I want to be have file transfers occur securely via SSH/SCP (we use OpenSSH), but am running into a scalability issue w.r.t. key management, where each machine has to have the public keys of users on other hosts. Well, you get the idea...

Is there a way to integrate OpenSSH with some centralized authentication point (e.g. Certificate Authority, or LDAP, or ...) which will help mitigate this scalability issue? This has become a headache, so any info/advice that would lead to a solution would be greatly appreciated.

--john Received on Tue Mar 18 01:16:30 2003