[Freeipa-users] label for public keys

Tiemen Ruiten t.ruiten at rdmedia.com
Thu Aug 4 15:13:38 UTC 2016


Wow, that's actually pretty obvious. That works, thanks!

On 4 August 2016 at 17:10, Jan Pazdziora <jpazdziora at redhat.com> wrote:

> On Thu, Aug 04, 2016 at 05:01:00PM +0200, Tiemen Ruiten wrote:
> >
> > Currently it is possible to add multiple SSH-keys for a single user in
> > FreeIPA. We are using this capability to grant access to multiple
> > contractors under a single user (so user company1, with keys A, B, C to
> > give access to three persons at company1).
> >
> > Unfortunately it's not possible to label these keys, so to ensure that we
> > can revoke access for eg. person B later on, we have to administrate this
> > separately. Would it be possible to add this as a feature? Or if it
> already
> > exists, could someone explain to me how to do it?
>
> By label, do you mean an admin-friendly string for the key to make
> sure you remove the correct key?
>
> For ssh-rsa keys, after the second space there is a place for comments
> and FreeIPA's WebUI will show it when listing the keys. Would that
> work for you or do you need something else?
>
> --
> Jan Pazdziora
> Senior Principal Software Engineer, Identity Management Engineering, Red
> Hat
>



-- 
Tiemen Ruiten
Systems Engineer
R&D Media
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160804/016af245/attachment.htm>


More information about the Freeipa-users mailing list