openssh bugs - May 2007 - [Bug 1316] New: Add LDAP support to sshd

http://bugzilla.mindrot.org/show_bug.cgi?id=1316

           Summary: Add LDAP support to sshd
           Product: Portable OpenSSH
           Version: 4.6p1
          Platform: All
               URL: http://dev.inversepath.com/trac/openssh-lpk
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: PAM support
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: pepper at rockefeller.edu


We would like very very much to have our Linux, Sun, and Mac servers
and workstations pull user names, authorization to log into hosts (by
group membership), and public keys from our existing campus LDAP
server.

One of our admins has had success with the LPK patches
http://dev.inversepath.com/trac/openssh-lpk for this purpose.

Thank you for OpenSSH!


-- 
Configure bugmail: http://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1316

--- Comment #1 from Scott Coil <scott at chaos-dragon.com> 2010-04-01
06:03:09 EST ---
Created an attachment (id=1826)
 --> (https://bugzilla.mindrot.org/attachment.cgi?id=1826)
patch adding public key authentication via LDAP

patch pulled from
http://openssh-lpk.googlecode.com/svn/trunk/patch/contrib/openssh-lpk-0.3.10_5.4p1.patch

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1316

Scott Coil <scott at chaos-dragon.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|http://dev.inversepath.com/ |http://code.google.com/p/op
                   |trac/openssh-lpk            |enssh-lpk/
                 CC|                            |scott at chaos-dragon.com

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1316

Scott Coil <scott at chaos-dragon.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Version|4.6p1                       |-current

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1316

Rob Moore <mindrot.robmoore at xoxy.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mindrot.robmoore at xoxy.net

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1316

buffer.g.overflow at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |buffer.g.overflow at gmail.com

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1316

--- Comment #2 from buffer.g.overflow at gmail.com 2011-05-31 00:57:59 EST ---
There seem to be plenty of interest downstream in supporting LDAP as a
network datastore for pubkeys (e.g. going back a few years, RH, Debian,
and Ubuntu have open bugs tracking this one), so, if this patch isn't
acceptable as offered, might it be possible to understand the reasons
and see if it's possible to arrive at an acceptable solution ?

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1316

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX

--- Comment #3 from Damien Miller <djm at mindrot.org> 2011-06-03 12:59:49
EST ---
We won't be integrating LDAP into sshd. There are patches to allow sshd
to fetch keys using a helper program (which could in turn use LDAP)
that will be considered, but I haven't had time to review them
properly.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1316

Ryan <ryanlee at zepheira.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ryanlee at zepheira.com

--- Comment #4 from Ryan <ryanlee at zepheira.com> 2011-06-03 15:29:13 EST
---
Do you have a pointer to that work?  Is there anything someone could do
to help progress down that path?

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1316

Emmanuel Bourg <ebourg at apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ebourg at apache.org

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1316

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #5 from Damien Miller <djm at mindrot.org> 2011-09-06 15:32:54
EST ---
close resolved bugs now that openssh-5.9 has been released

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.