Re: SSH Gateway

[Howard Chu <hyc@symas.com>]

Stuart Watson wrote:
> Hi
>
> I am looking at creating a SSH gateway using OpenLDAP.  The idea is to store
> our devs public keys in OpenLdap, which would give us the ability to control
> who has SSH access to our servers.
>
> Currently everyone shares the same key which means it is impossible to control
> access.
>
> Do I just need to...
>
> Install OpenLDAP
> Import the public keys into OpenLDAP
> Install OpenSSH Server on the OpenLDAP server and configure it to use LDAP.
> Configutre the remote servers to use the OpenLDAP servers to authenticate
>
> The the devs can ssh from their computers through the OpenLDAP server to the
> remote servers.
>
> Can anyone help?

Sounds more like a question for the OpenSSH mailing lists. The last I knew, 
they refused to integrate patches providing LDAP key lookup support.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/