splitting big authorized_keys files

Jim Knoble jmknoble at pobox.com
Wed Aug 20 05:25:44 EST 2003


Circa 2003-08-19 10:30:19 +0200 dixit Markus Friedl:

: On Tue, Aug 19, 2003 at 10:14:35AM +0200, Ph. Marek wrote:
: > But that gives me a user, whose ~/.ssh/authorized_keys file has about 15000 
: > entries.
: 
: the current scheme was not intented for 15000 entries, you
: should try to switch some database...

For example:

  http://cr.yp.to/cdb.html

The CDB API is very simple and relatively lightweight, and it's
designed for situations where the database doesn't change very
frequently, which i imagine is the case for your 15000 pubkeys.
Additionally, the CDB tools allow you to maintain your keys via a text
file can easily be put under revision control.

-- 
jim knoble  |  jmknoble at pobox.com  |  http://www.pobox.com/~jmknoble/
(GnuPG fingerprint: 31C4:8AAC:F24E:A70C:4000::BBF4:289F:EAA8:1381:1491)
"We have guided missiles and misguided men." --Martin Luther King, Jr.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 256 bytes
Desc: not available
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20030819/049ea203/attachment.bin 


More information about the openssh-unix-dev mailing list