3 ms·
I wonder who uses this. If you have a fleet, cluster, group or 'multiple' boxes you need to SSH to, doesn't Kerberos make more sense? Or at least something like
by oneplane 10y ago
I wonder who uses this. If you have a fleet, cluster, group or 'multiple' boxes you need to SSH to, doesn't Kerberos make more sense? Or at least something like SSSD's public key proxy? And if you're doing it for configuration management, doesn't actual configuration management make more sense?
- jdc0589 10y agothis is more than just authentication/authorization. It also servers as a transparent bastion server tier, and allows you to do full historical auditing of interactive sessions, on a highly available setup (if you set it up that way). You can rig a lot of this functionality up yourself, but there aren't a lot (or any) open source solutions out there that come as relatively complete turn-key packages.