4 ms·
The standard practice is for ops/developers to SSH to servers as themselves. They get sudo privileges on the machines that they should be able to manage. Usual
by user5994461 6y ago
The standard practice is for ops/developers to SSH to servers as themselves. They get sudo privileges on the machines that they should be able to manage.
Usually this is exclusively using SSH keys, password authentication is blocked. root login is blocked too, you can only login as a normal user and sudo.
It's quite easy to manage with ansible itself. Make a configuration file to store public keys and username and that's about it. That will work pretty well until the company has 500 employees and wants to invest into a SSO solution to manage authentication company wide (AD/kerberos/pam).