Issue 12 in openssh-lpk: Feature request: add LDAP functionality to ssh-copy-id
codesite...@google.com
Owner: ----
Labels: Type-Defect Priority-Medium
New issue 12 by johnlo...@gmail.com: Feature request: add LDAP
functionality to ssh-copy-id
http://code.google.com/p/openssh-lpk/issues/detail?id=12
The ssh-copy-id shell script has become the de facto management tool for
uploading public keys to a server for many users. Having LDAP functionality
would make it easier for users who do not know what they are doing with
LDAP to put their public keys in the directory. Since the best way to get
something done is to do what one has suggested, I am planning on working on
this myself.
I am guessing at first glance I shall be using the OpenLDAP,
http://www.openldap.org, utilities for this in a shell script. I am
thinking that, for now, relying on the $sysconfdir variables provided by
the OpenLDAP libs for configuration the utilities and just passing an
identify will be the only other option for now.
A simple switch that indicates they are uploading the public key to an LDAP
directory should suffice for most, but I would imagine giving the user
configurable options for the various LDAP options should eventually be
included. I think adding some switch, such as "-L", or "-l" for LDAP for
now. "-L" is already used by some of the OpenLDAP utilities for output in
LDIF format, so perhaps "-l" would be a good idea to prevent overlapping
options.