Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
A system for distributing SSH public keys

Suppose that I have four servers (SA, SB, SC, and SD). I want to give user X access to SA and SB. I can do it easily by ssh -keygen -t RSA and then give X the id_rsa file. Now if I changed my mind and I want to give him access to SC and drop his access on SB. I can do it manually.
Now the question: What if I have 100 servers and 20 system admin. It would be very sophisticated process to handle it in such way. Is there a tool that can help me in managing access to servers more easily.

share|improve this question

marked as duplicate by mailq, Iain, Scott Pack, Shane Madden, MDMarra Nov 17 '11 at 1:16

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

up vote 1 down vote accepted

A tool like puppet can easily do this

share|improve this answer

Generating / distributing keys is not the way to control access to individual machines. Use groups to determine whio should have access to particular machines (and setup sshd to only allow the group for that machine to connect).

share|improve this answer

I know this is a rather complex approach, but in my opinion going with LDAP based netgroups, nss_ldapd and possibly augmented by sudo-ldap is the most integrated solution. Once LDAP is in place you get Kerberos SSO virtually for free as well.

share|improve this answer

Can an nis server not do what you want (in conjunction with setting ssh right) ? - seems to me like that'd be the easy solution. Otherwise, puppet.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.