4 ms·
LDAP is nice to grant and revoke access and have passwords in sync with the computers at work. Maybe the certificates could be stored in LDAP.
by brunoqc 11y ago
LDAP is nice to grant and revoke access and have passwords in sync with the computers at work.
Maybe the certificates could be stored in LDAP.
- snuxoll 11y agoAlmost any decent enterprise identity management solution (read: Active Directory, FreeIPA) includes user certificate management in some fashion; or if you want a separate CA for VPN access it's not hard to write a couple scripts to generate user certificates and revoke them as needed.