Ahh...now I understand. Let me re-state just to make sure I'm clear on this.
HostA user1 key-v ----> HostB SubvUserAcct : key-v && key-p && key-j
HostA user2 key-p ----> HostB SubvUserAcct : key-v && key-p && key-j
HostA user3 key-j ----> HostB SubvUserAcct : key-v && key-p && key-j
Such that key-v/p/j are all in the same authorized hosts file?
In this case you will have to require that your users use the "-C" flag to
add a comment to the key and put their email or id. You can then view the
comments in the keys file and ident key <--> user
Hope that works out for you.
- Erich
On Mon, Mar 3, 2008 at 7:18 PM, Joey Prestia <
joey@linuxamd.com> wrote:
> Erich Newell wrote:
> > I am confused.
> >
> > There should be a .ssh directory in each user's home dir. In that there
> > would be an "authorized_keys" file for that user and possibly a
> > known_hosts file as well if outbound connections are permitted from the
> > user shell. Removing the user and his home directory then removes
> access.
> >
> > Does that answer your question or am I completely missing the point?
> >
> > Cheers.
> >
> > - Erich
> >
> > On Mon, Mar 3, 2008 at 10:32 AM, Joey Prestia <joey@linuxamd.com
> > <mailto:joey@linuxamd.com>> wrote:
> >
> > Anyone know of a way to have multiple ssh authorized_keys files for
> host
> > key authentication for different users. I am familiar with the usual
> > practice of echoing all of the users keys into authorized_keys file
> but
> > I am thinking in terms of if I have to revoke keys and disable user
> > access. What I would like to do is have a setup similar to apache in
> > that it can have files included in the conf directory. So this way I
> > have a user name or identifying indicator of whose key is whose so I
> can
> > revoke access as the necessity arises.
>
>
> What I am looking to do is use one user for subversion and give that
> user read and write access. But for security I want to use host keys and
> have the ability to revoke any one user by being able to identify
> their host key and removing it. The current setup uses one user and adds
> the new persons host key to the authorized keys but I cant distinguish
> between who's host key is who's in order to terminate one users access.
> With apache you can specify to include conf files in the conf.d
> directory and remove any conf file will remove the special
> configuration. Well I would like to be able to do something similar with
> ssh host key access to subversion
>
> --
> Joey
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
--
"A man is defined by the questions that he asks; and the way he goes about
finding the answers to those questions is the way he goes through life."
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)