OpenLDAP schema to store OpenPGP keys?

David Shaw dshaw at jabberwocky.com
Tue Feb 21 19:10:57 CET 2006


On Tue, Feb 21, 2006 at 10:10:40AM +0100, Matthias Urlichs wrote:
> Hi, David Shaw wrote:
> 
> > Anyway, that is (more or less) how I was expecting LDAP to be used.  I
> > never added LDAP auth because I wasn't sure exactly what was needed,
> > and didn't want to implement it without some clear use case.
> 
> The pam_ldap module has optional "binddn" and "bindpw" configuration
> options. Having the same kind of support in gpg would make sense, IMHO.

It's possible to do this, of course, but remember that GPG currently
does not have password functionality for keyservers, and so this
implies a cleartext password for the keyserver stored somewhere in a
config file.

To be sure, pam_ldap stores a cleartext password in a config file as
well...

David



More information about the Gnupg-users mailing list