[389-users] adding ssh public keys to 389

[Smlacc1]

If you are looking for the client side config, try this:

http://tuxotaku.com/bitbucket/2011/12/20/setting-up-passwordless-ssh-login-and-key-management-using-l.html

It requires a recompile of ssh though.

Elf

On 2013-05-08, at 2:53 PM, Steve Ovens <steve_ovens at linux.com> wrote:

> Hi,
> 
> I have been quite happily using 389 for around a year, and while I am not at all advanced I have been able to add Samba and sudoers to 389. I am now attempting to add openssh keys to the user entries I am using the openssh-lpk_openldap.schema:
> 
> 
> 
> #
> # LDAP Public Key Patch schema for use with openssh-ldappubkey
> # Author: Eric AUGE <eau at phear.org>
> # 
> # Based on the proposal of : Mark Ruijter
> #
> 
> 
> # octetString SYNTAX
> attributetype ( 1.3.6.1.4.1.24552.500.1.1.1.13 NAME 'sshPublicKey' 
>     DESC 'MANDATORY: OpenSSH Public key' 
>     EQUALITY octetStringMatch
>     SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
> 
> # printableString SYNTAX yes|no
> objectclass ( 1.3.6.1.4.1.24552.500.1.1.2.0 NAME 'ldapPublicKey' SUP top AUXILIARY
>     DESC 'MANDATORY: OpenSSH LPK objectclass'
>     MAY ( sshPublicKey $ uid ) 
>     )
> 
> 
> I have run this through the ol-schema-migrate.pl and placed the output in /etc/dirsrv/slapd-ds/schema/62sshkeys.ldif.
> 
> I have restarted the server and there were no errors produced so I am assuming that it took the ldif fine.
> 
> How do I go about using the new schema. I have googled around quite a bit, but I must be missing something. I would appreciate any pointers and I fully intend on publishing a how-to on this (as I do for most things over at overclockers.com)
> 
> Any guidance would be greatly appreciated!
> 
> Thanks
> 
> -- 
> Red Hat Certified Engineer
> Ubuntu Certified Professional
> Novell Datacenter Specialist
> Novell Certified Linux Administrator
> LPIC-1 Certified
> Linux+ Certified
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20130508/7f239b68/attachment.html>