I recently deployed a slapd(8) instance, and immediately recognized the need for a robust directory entry management utility. After doing some reading and experimentation, I discovered that Perl - and a few accompanying modules - handle the job nicely. What I'm sharing here is a brief, rather disjointed synopsis and some code samples.

In order to understand and use the samples, you should be comfortable with Perl and the installation of modules. And you'll certainly want a good fundamental...

Nothing earth shattering here. Just a quick automation utility I put together using the venerable openssl.

The wrapper script does a couple sanity checks, and saves you from having to remember command options for enc(1). You can change _cipher to suit your tastes / baked-in support.

...

The problem:

• You're a RHEL5 sysadmin.
• You want to run your regular ol' ssh daemon.
• You also want to chroot a few sftp users.
• You need the OpenSSH Match directive with support for the ChrootDirectory directive! This functionality exists as of OpenSSH version 5.1. [1]
• Alas, your RHEL5 server still runs OpenSSH version 4.3p2. [2]

----------------------------------------------------------------------

Some thoughts and a solution:

You can...