One use case where it may not be desirable to have users own the keys is in centralized ssh key setups backed by LDAP and PAM authentication. In this specific case all keys are stored in a central location such as /etc/ssh-public-keys/*.pub. The keys are only read by PAM (root) during the authentication phase.
-- You received this message because you are subscribed to the Google Groups "Puppet Developers" group. To post to this group, send email to puppet-dev@googlegroups.com. To unsubscribe from this group, send email to puppet-dev+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-dev?hl=en.