Task:	SSH public key distribution
Group:	sxw
Stage:	1

Description

A system for collating and distributing ssh public keys around the DICE network.

SSH relies upon a wide knowledge of public keys for servers. In our world, every machine is a SSH server, and every machine a potential client. We need a way of securely distributing and maintaining this set of keys. Issues

• I've already produced a system for submission (using machines' kerberos keys) of public ssh keys to a central LDAP repository and retrieval.
• GSSAPI connections don't need ssh keys at all - do we only need to distribute keys for "public" servers.

 : Deploy 

Please contact us with any comments or corrections. Unless explicitly stated otherwise, all material is copyright The University of Edinburgh