diff options
author | Matt Goins <mjgoins@openflows.com> | 2008-06-20 14:23:41 -0400 |
---|---|---|
committer | Matt Goins <mjgoins@openflows.com> | 2008-06-20 14:23:41 -0400 |
commit | 3a6f611a52d56b919b8c50a6e1700af43ff49578 (patch) | |
tree | 1bbbb9fef2438c47c5801ea822099c97fabdcf6f /rhesus/README | |
parent | b75cb97e42dd3327942d8b32cac2d9ee97e9aa4a (diff) | |
parent | 9efdaab59edb2ff4454082f6a36c9dc0d90b8885 (diff) |
Merge branch 'master' of http://lair.fifthhorseman.net/~dkg/git/monkeysphere
Conflicts:
gpg2ssh/Makefile
Diffstat (limited to 'rhesus/README')
-rw-r--r-- | rhesus/README | 30 |
1 files changed, 0 insertions, 30 deletions
diff --git a/rhesus/README b/rhesus/README deleted file mode 100644 index 4d383d5..0000000 --- a/rhesus/README +++ /dev/null @@ -1,30 +0,0 @@ -rhesus is the monkeysphere authorized_keys/known_hosts generator. - -In authorized_keys mode, rhesus takes an auth_user_ids file, which -contains gpg user ids, uses gpg to fetch the keys of the specified -users, does a monkeysphere policy check on each id, and uses gpg2ssh -to generate authorized_keys lines for each verified id. The lines are -then combined with a user's traditional authorized_keys file to create -a new authorized_keys file. - -In known_hosts mode, rhesus takes an auth_host_ids file, which -contains gpg user ids of the form ssh://URL, uses gpg to fetch the -keys of the specified hosts, does a monkeysphere policy check on each -id, and uses gpg2ssh to generate a known_hosts lines for each verified -id. The lines are then combined with a user's traditional known_hosts -file to create a new known_hosts file. - -When run as a normal user, no special configuration is needed. - -When run as an administrator to update system-maintained -authorized_keys files for each user, the following environment -variables should be defined first: - - MS_CONF=/etc/monkeysphere/monkeysphere.conf - USER=foo - -For example, the command might be run like this: - - for USER in $(ls -1 /home) ; do - MS_CONF=/etc/monkeysphere/monkeysphere.conf rhesus --authorized_keys - done |