Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have couple of Debian servers and currently I am struggling around with adding manually ssh keys to the server's authorized_keys files. Do you know an application which can do this in a nice semi-automated way? Ideally with a nifty interface, where I can see which keys are used on which server etc.? I have just read in this posting about puppet, but I need to evaluate it a bit. Do you have any suggestions?

share|improve this question
3  
LDAP? LDAP. LDAP! –  Ignacio Vazquez-Abrams Apr 2 '12 at 8:31
    
Oh, ok. Didn't know this. Is this the normal way of handling this? –  High6 Apr 2 '12 at 12:09
    
and setting up and maintaining a LDAP server seems to my like more additional work. But thanks for pointing this out, so I can taking this also into account. –  High6 Apr 2 '12 at 12:27
    
possible duplicate of Centralized management system for SSH keys? –  Jeff Ferland Apr 2 '12 at 23:26

1 Answer 1

up vote 2 down vote accepted

Any change management system will do the trick; puppet and cfengine being the most used and either would do the job.

Personally, I favor puppet and the configuration to deploy SSH keys is built in and quite robust; it'd take only a few hours to deploy, get comfortable, and start using it for somthing as well-contained as ssh key management. Here is some useful documentation on doing just that:

http://projects.puppetlabs.com/projects/1/wiki/Authorized_Keys_Patterns

As a bonus side effect, you'd then have a deployment system for other management tasks you could leverage. :-)

share|improve this answer
1  
To be fair, there is a learning curve. However, it's such a useful tool that soon you'll be looking for more things to manage. I started with simply managing ntpd.conf and sudoers. –  Martijn Heemels Apr 2 '12 at 22:07
    
Thanks. I will try puppet and we will see. :) –  High6 Apr 3 '12 at 8:11

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.