Bo Branten <[EMAIL PROTECTED]> writes:

> If one would like to give a large amount of people access to a system
> with little administration it would be nice if it was possible to feed
> the list of theirs PGP public keys to sshd. Is their a known method to
> do this? Have anyone given any thought on this matter?

It should be fairly straight-forward to extract the public keys of a
(subset of) a pgp keyring file and format them into a
.ssh/authorized_keys file, if that is sufficient for your needs.

I looked into reading pgp's file format some year ago, but I don't
have any working code.

The users would also have to massage their private pgp keys into ssh's
format. That should also be fairly straight-forward, but you'll have
to read the source-code as the private key format used by ssh seems
not to be documented.

And I'm only talking of rsa keys and ssh-1 here; I don't really know
what algorithms are understood by both ssh-2 and pgp-5, and whether or
not they are compatible.

/Niels

Reply via email to