3 ms·
We only do that in bastion servers. It would be a bit trickier with laptops, but doable I guess.
by mfdutra 10y ago
We only do that in bastion servers. It would be a bit trickier with laptops, but doable I guess.
- lox 10y agoMakes sense. I missed that section, much clearer now, thanks. Any plans to release more details on how the bastion hosts are configured? Seems like that would be the complex bit to get right.
- mfdutra 10y agoAbsolutely nothing special about them. They trust the same LDAP/Kerberos infra the laptops are part of. We have two-factor authentication, which is pretty simple with PAM. And they're only accessible if you are in our corporate network.