[Bug 911747] Re: [Feature] Add AuthorizedKeysCommand to OpenSSH

[Ubuntu Foundation's Bug Bot]

The attachment "The RedHat patch for OpenSSH" of this bug report has
been identified as being a patch.  The ubuntu-reviewers team has been
subscribed to the bug report so that they can review the patch.  In the
event that this is in fact not a patch you can resolve this situation by
removing the tag 'patch' from the bug report and editing the attachment
so that it is not flagged as a patch.  Additionally, if you are member
of the ubuntu-reviewers team please also unsubscribe the team from this
bug report.

[This is an automated message performed by a Launchpad user owned by
Brian Murray.  Please contact him regarding any issues with the action
taken in this bug report.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/911747

Title:
  [Feature] Add AuthorizedKeysCommand to OpenSSH

Status in “openssh” package in Ubuntu:
  Confirmed

Bug description:
  RedHat recently applied a patch to their OpenSSH server supporting a
  new configuration directive: AuthorizedKeysCommand

  For example:

  */etc/ssh/sshd_config*
  AuthorizedKeysCommand "/usr/libexec/openssh/ssh-pubkey-helper -s %u"

  In 'ssh-pubkey-helper' you can write custom code for looking up public
  keys.

  This is useful in large server environments when you don't want to
  overwrite the authorized_keys file on every server.

  We are running a couple of hundred Ubuntu servers and would like to
  see this patch in OpenSSH. It would give us (and other users) the
  benefit of having one central place where we maintain our
  authorization and accounting.

  The benefit for a lot of Ubuntu users will be great I think.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/911747/+subscriptions