central management of ssh public keys

Hello,

I have been looking for a way to centrally manage our growing list of openssh public keys. Currently we have around 200 users which all authenticate to servers using public key authentication (each with their own key). In this case the management of this becomes seriously tiresome. We have tested the GSSAPI functionality within openssh and found that the additional management of the kerberos was something we did not want to deal with. We have since found the following patch

http://dev.inversepath.com/trac/openssh-lpk

It seems to be exactly what we are looking for, it removes the requirement to have kerberos -> ldap or active directory in a totally UNIX environment. Does anyone know if these patches will be introduced into the mainline openssh portable code? I notice that the patches have been available for some time. Has anyone heard anything about this or is it a pipe dream.

Alternatively what other solutions are available to manage keys on a large scale?

Regards,

Jimmy.

Relevant Pages

  • Re: Putty/OpenSSH Public key auth
    ... Public keys generated by PuTTY cannot be read directly by OpenSSH. ... need to be installed on the server in the correct format. ...
    (SSH)
  • Re: Openssh, kerberos and Solaris 10
    ... I want SSH to automatically forward my krb5 credentials when I SSH ... into another machine using public keys. ... the OpenSSH autoconf scripts probably don't ...
    (comp.protocols.kerberos)
  • SecureCRT & F-Secure public key?
    ... * The client has decided to go with SecureCRT on their Windows systems. ... The format of the key seems the same as the standard ssh2 format. ... * I can convert the SecureCRT key to openssh, then back to ssh2 format - ... the server I am able to authenticate using public keys. ...
    (comp.security.ssh)
  • SecureCRT & F-Secure public key?
    ... * The client has decided to go with SecureCRT on their Windows systems. ... The format of the key seems the same as the standard ssh2 format. ... * I can convert the SecureCRT key to openssh, then back to ssh2 format - ... the server I am able to authenticate using public keys. ...
    (comp.security.ssh)
  • Re: bootstrapping a secure channel
    ... Yes, this is Bob speaking. ... require an authenticated channel which is used by the two humans to ... reliably authenticate a large amount of data (in this case two public ... people do send public keys and public key hashes in email all the ...
    (sci.crypt)