Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

So we are trying to lock down our systems to be accessed only by a few logical users (users on the Linux machines) but many physical users.

That is all the developers can login as user dev with their own SSH Key.

The question is how to manage the users public SSH keys so that they can easily add (or I the adminstrator can) to all the various systems.

Ideally this would be some SSL web interface similar to how github or bitbucket works where you can (or sys admin) can add your SSH key.

Is there admin software out there that makes this easy or do I have to roll my own?

I meant to post this question on ServerFault and I can't seem to close it here (not enough rep).

share|improve this question

migrated from superuser.com Aug 27 '12 at 17:59

This question came from our site for computer enthusiasts and power users.

add comment

1 Answer 1

up vote 1 down vote accepted

You are looking for LDAP authentication with ssh-keys.

One of most robust and advanced solutions is using Gosa panel as a frontend for Slapd LDAP server that can manage sudo and ssh keys over the systems. You will have to install ssh-ldap patched version (it's called openssh-lpk) http://code.google.com/p/openssh-lpk/

So generally summing this up this is what you have to set up:

  1. Ldap server (for example slapd)
  2. Frontend panel for ldap server (optional)
  3. connect all machines to enable ssh-ldap authentication
  4. patch ssh servers so they will respect ldap ssh keys (it's fully managable via gosa)
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.