3 ms·
Interesting, so I'm assuming this wouldn't work for staff that roam with laptops?
by lox 10y ago
Interesting, so I'm assuming this wouldn't work for staff that roam with laptops?
- mfdutra 10y agoWe only do that in bastion servers. It would be a bit trickier with laptops, but doable I guess.
- lox 10y agoMakes sense. I missed that section, much clearer now, thanks. Any plans to release more details on how the bastion hosts are configured? Seems like that would be the complex bit to get right.
- mfdutra 10y agoAbsolutely nothing special about them. They trust the same LDAP/Kerberos infra the laptops are part of. We have two-factor authentication, which is pretty simple with PAM. And they're only accessible if you are in our corporate network.