[Freeipa-devel] [PATCH] 83 Use OpenSSH-style public keys as the preferred format of SSH public keys

[Jan Cholasta]

Hi,

this patch changes the format of the sshpubkey parameter to the format 
used by OpenSSH (see sshd(8)).

Public keys in the old format (raw RFC 4253 blob) are automatically 
converted to OpenSSH-style public keys. OpenSSH-style public keys are 
now stored in LDAP.

Changed sshpubkeyfp to be an output parameter, as that is what it 
actually is.

Allow parameter normalizers to be used on values of any type, not just 
unicode, so that public key blobs (which are str) can be normalized to 
OpenSSH-style public keys.

Note that you need a SSSD build including 
<https://fedorahosted.org/sssd/changeset/f130a609a840d4548c795ce5e63afb5891358e20/> 
(SSSD 1.9.0beta7-to-be) in order to make OpenSSH integration actually 
work with OpenSSH-style public keys.

<https://fedorahosted.org/freeipa/ticket/2932>
<https://fedorahosted.org/freeipa/ticket/2935>

Honza

-- 
Jan Cholasta
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-jcholast-83-openssh-style-public-keys.patch
Type: text/x-patch
Size: 25012 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20120904/37e7bbeb/attachment.bin>