[pca] pca proxy server offer

[Don O'Malley]

FYI - Just to add a little bit more info on ssh key generation in Solaris:

You can generate a ssh keys in Solaris using the following command:

# ssh-keygen -t dsa -f ~/.ssh/id_dsa

The command will ask you some questions, if you like you can leave the
password field blank, which will make things a little easier, but offers
less security.

Once the command is run, it should have generated a public key:
~/.ssh/id_dsa.pub

HTH,
-Don

Ron Halstead wrote:
> If anyone is interested, I have scripted a pca proxy server setup, 
> both the server side and the client side with supporting files and the 
> httpd.conf file. I can tar it up and mail it to anyone who cares. Or 
> if Martin would like to host it, I can send it to him.
>
> It requires that root have an ssh key and the id_rsa.pub file be in 
> every client's /root/.ssh/authorized_keys.
>
> The scripts have been approved for use in my (very paranoid) company 
> and will be shortly implemented. It has been thoroughly tested both in 
> my home network and on my company's test network. It just works (tm).
>