4 ms·
A somewhat related tool is Vault SSH Helper: https://github.com/hashicorp/vault-ssh-helper https://github.com/hashicorp/vault-ssh-helper It provides an audit l
by sandstrom 10y ago
A somewhat related tool is Vault SSH Helper:
https://github.com/hashicorp/vault-ssh-helper https://github.com/hashicorp/vault-ssh-helper
It provides an audit log (without session history/playback) and one-time passwords for login. It avoids copying of ssh certificates to every host, similar to teleport.
One nice advantage with Teleport is the recording of sessions. On the other I like how Vault's tool use standard ssh on the client-side.
Some type of merge between the two would be a dream :D
- alexk 10y agoBTW you can use Teleport with standard SSH clients as well: http://gravitational.com/teleport/docs/admin-guide/#using-teleport-with-openssh http://gravitational.com/teleport/docs/admin-guide/#using-te... tsh can work in agent mode, or you can generate certificates yourself.
- deleted 10y ago[deleted]
- bogomipz 10y agoThis looks interesting. Do you have good feedback about using this in production? Cheers.
- Fnoord 10y agoWhat is the advantage of those solutions over pam_google_authenticator?