> You can either continue as usual with an authorized_keys file in their > home directories, or look at the LPK patch available for OpenSSH that > allows storing public keys in LDAP. > > Having the users in LDAP has absolutely no effect on how key-based > logins work with SSH, but it does open up some other options. So the easiest route to take might be to dis-allow ssh logins for everyone except my few authorized users via the /etc/security/access file? And then to allow exceptions on a case by case basis using this file as well?
