Re: [DISCUSS] Return ssh publickeys in listSSHKeyPairs

2013-10-08 Thread sebgoa
On Oct 5, 2013, at 3:41 PM, Ian Duffy wrote: > Hi, > > With the development of gClouds, a google compute interface for > cloudstack I have found the need to get access to the ssh public keys > that Cloudstack generates as part of a keypair. > > The publickeys are currently not exposed in any w

RE: [DISCUSS] Return ssh publickeys in listSSHKeyPairs

2013-10-08 Thread Frankie Onuonga
sebgoa<mailto:run...@gmail.com> Sent: ‎10/‎8/‎2013 2:42 PM To: dev@cloudstack.apache.org<mailto:dev@cloudstack.apache.org> Subject: Re: [DISCUSS] Return ssh publickeys in listSSHKeyPairs On Oct 5, 2013, at 3:41 PM, Ian Duffy wrote: > Hi, > > With the development of gClouds, a g

Re: [DISCUSS] Return ssh publickeys in listSSHKeyPairs

2013-10-08 Thread Chip Childers
On Tue, Oct 08, 2013 at 01:05:32PM +, Frankie Onuonga wrote: > Hi guys , > From my fundamentals of security I do not think returning a public key is > wrong . > What is sensitive is the private key. > As long as that is bit exposed in any way then all should be well. +1 to Frankie's comment

Re: [DISCUSS] Return ssh publickeys in listSSHKeyPairs

2013-10-09 Thread Ian Duffy
Great thanks for the feedback. Will get this applied at the weekend. Just out of interest. In an account we have users. Those users have access to all the VMs via the Cloudstack Management interface. However they don't necessarily have access to the VMs(i.e. They do not know its password or their

Re: [DISCUSS] Return ssh publickeys in listSSHKeyPairs

2013-10-09 Thread Wei ZHOU
I need this as well. AFAIK, an agent is needed in user vms. > Is there any way to add multiple SSH Public keys to a VM without powering it down?

Re: [DISCUSS] Return ssh publickeys in listSSHKeyPairs

2013-10-09 Thread Ian Duffy
> AFAIK, an agent is needed in user vms. I was hoping it'd be possible via the file sharing capabilities many of the hypervisor tools offer. Although I would imagine security issues could arise from that. On 9 October 2013 15:51, Wei ZHOU wrote: > I need this as well. > > AFAIK, an agent is need