RE: OpenSSH and LDAP, or CA, or ???

One solution is to use NFS. All user home directories should be on NFS and machines should mount the NFS. You only need to store the key on NFS server.

An

-----Original Message-----

From: John Sasso [mailto:jsassojr@nycap.rr.com] Sent: Monday, March 17, 2003 1:19 PM
To: secureshell@securityfocus.com
Subject: OpenSSH and LDAP, or CA, or ???

Is it possible to interface/integrate OpenSSH with a centralized authentication scheme (e.g. certificate authority, LDAP, etc.)? I want to be have file transfers occur securely via SSH/SCP (we use OpenSSH), but am running into a scalability issue w.r.t. key management, where each machine has to have the public keys of users on other hosts. Well, you get the idea...

Is there a way to integrate OpenSSH with some centralized authentication point (e.g. Certificate Authority, or LDAP, or ...) which will help mitigate this scalability issue? This has become a headache, so any info/advice that would lead to a solution would be greatly appreciated.

--john
Received on Tue Mar 18 21:47:00 2003