Re: RE: [tf-emc2] Comments please: notes of Beyond Web SSO BoF

["Diego R. Lopez" <diego.lopez@xxxxxxxxxx>]

On 27 May 2008, at 19:12, Leif Johansson wrote:
> Its a federated interface for ssh key provisioning. I'm curious how  
> he maps
> posix user/group id's on the remote system though - I'm assuming the  
> idp
> doesn't get to set those...


Obviously not. The uid/gid have to previously exist at the remote  
system. The
SP extracts both the username and the key to be associated, so it is  
possible
to associate each user with a remote account, or a group or users with a
remote account, etc.

There is another user case (and application) for remote account  
provision under
discussion in CONFIA (the federation in which the SSH system has been  
deployed),
but this is another story... May be Luis or Dani can tell you more on  
this.

Be goode,


--
"Esta vez no fallaremos, Doctor Infierno"

Dr Diego R. Lopez

Red.es - RedIRIS
The Spanish NREN

e-mail: diego.lopez@xxxxxxxxxx
jid:        diego.lopez@xxxxxxxxxx
Tel:    +34 955 056 621
Mobile: +34 669 898 094
-----------------------------------------