5 ms·
Genuine question: what functionality does this provide that e.g. Ansible doesn't? With Ansible, one can put the SSH keys into a .yml file in a format that is v
by sz4kerto 9y ago
Genuine question: what functionality does this provide that e.g. Ansible doesn't?
With Ansible, one can put the SSH keys into a .yml file in a format that is very similar to the examples in the OP, then the authorized_key module can be used to ensure that the key is present (or absent) on the remote servers. It's really-really trivial.
Maybe the difference is that you can paste the SSH key into the CLI instead of a file... hm.
- tr0ut 9y agoCan you post an example of this? Link works too.
- trashcan 9y agoRelevant documentation: http://docs.ansible.com/ansible/latest/authorized_key_module.html http://docs.ansible.com/ansible/latest/authorized_key_module...
- mdekkers 9y agoNice. I do the same, with Saltstack. I manage all my users' access, including account creation and removal, password setting, and key management. Easy peasy.
- lima 9y agoIt doesn't. A bit faster maybe. Ansible is perfect for deploying SSH keys.
- jmcnulty 9y agoYou're much better off using AuthorizedKeysCommand as vertex-four suggested, and ditch passwords completely. It just needs to return the SSH public key of the login user. You can get that from any backend you like. If you have an LDAP server, great. But it doesn't have to be anything fancy; you could pull the user's key off a web server! Distributing accounts and SSH keys via any configuration management system is clunky by comparison, and scales badly when you get to many hundreds of users and thousands of servers.