Can openssh fetch pubkeys via network, i.e. via LDAP?
Issue
- When a user tries to log in openssh should not only consult local files like
~/.ssh/authorized_keysbut fetch the pubkey via network or from other sources. - The patches at http://code.google.com/p/openssh-lpk/ facilitate fetching via LDAP, will this be included in
opensshas delivered? - Until RHEL6.3 I used an own script with
AuthorizedKeysCommandtogether to fetch ssh user pubkeys from LDAP. Since RHEL6.3 it is possible to useAuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeysto fetch ssh keys, can this replace my old script?
Environment
- Red Hat Enterprise Linux (RHEL) 6
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.