LDAP PKI/OpenSSH

Skillshot · n00b Joined: 20 Nov 2002 Posts: 70 Location: KA, Germany

Hi there,

after searching for a solution quite a while i'm hoping to get some help here:

I did setup an openldap-server for authentication/authorisation of my users and now i'm trying to use ldap for public key distribution. I can see the querys from sshd in the logfile but when it comes to

(&(objectClass=posixGroup)(dn=cn=users,ou=Group,dc=myserver,dc=de))

the query returns nothing.

The users-Group does exist:
# ldapsearch -LLL "(&(objectClass=posixGroup)(cn=users))"

dn: cn=users,ou=Group,dc=myserver,dc=de
gidNumber: 100
cn: users
userPassword:: XXXXXXXX
objectClass: posixGroup
objectClass: top
memberUid: bregen

Maybe someone here can help me out to understand whats (not

) hapening ...

Versions:
openldap-2.3.27-r3 on the server
openssh-4.4_p1-r6 on the client

Thx, Skillshot

vad3r · Posted: Thu Dec 07, 2006 12:05 pm Post subject:

If i get you right you want to sshd to authenticate your users with keys located in your ldap directory. Therfore you need to change your users in the directory. Here's one of my users: