4 ms·
Yes, but it's rarely how companies use OpenSSH because it takes a ton of work to set up. Teleport gives you all this functionality by default out of the box. So
by cronos 6y ago
Yes, but it's rarely how companies use OpenSSH because it takes a ton of work to set up.
Teleport gives you all this functionality by default out of the box. So it's not inventing anything new, just provides better UX.
- number6 6y agoIts not a ton of work, most works out of the box and requires just a command line argument
- cronos 6y agoA "ton" of work may have been an exaggeration. Maintaining a CA (and dealing with cert rotation) is some work. Other things are indeed just a flag or config option (like jumphosts). But it takes work for a sysadmin/devops to educate all engineers in the company and make sure everyone uses the correct setup and doesn't end up dropping authorized_keys around random servers. It's not that difficult technically as it is socially.
- number6 6y agoYeah, you are right about this. Just thought about a personal setup, but getting it all up and running in enterprise scape will be more work than just a few flags