On May 10, 2008, at 5:03 AM, Kevin Graham wrote: > username autotool access-class 50 keyring TOOLS priv 15 > access-list 50 permit host 192.0.2.5 > crypto keyring TOOLS > ssh-dsa-pubkey name rancid
Well as an alternative to putting the keys in a config, how about the ability to return public keys as part of a attribute returned from a RADIUS server. I know there may be an issue with packet size, but I think most 512-1024 bit keys should be able to fit in a standard authentication based response. -- Robert Blayzor, BOFH INOC, LLC [EMAIL PROTECTED] http://www.inoc.net/~rblayzor/ Mac OS X. Because making Unix user-friendly is easier than debugging Windows. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
