New to ServerFault, but have been on StackOverflow for a few months and loving it.
I work on a daily basis on 5 servers I have been setting up for some time now.
These servers are all AIX 7.1, and are quite similar, running all different environments of the same application.
I have the same user on all 5 of them, and their directory structure is pretty much the same.
I usually open putty sessions to all of them from my Windows laptop for my daily work, but there's also a lot of ssh and scp between them.
I want to set up SSH key-based authentication so as not to need to issue a password every time. Also to allow some automated scripts to run between them. Since I need this for automation also, I'm not planning on using ssh-agent but rather generating the key pair(s) with an empty passphrase. I'm aware it is less secure.
What I have been wondering is... what is the best approach? Should I generate a different key pair on each of the servers, and distribute each public key to the other 4? Or should I rather associate the key pair to the user (the same one on all 5 servers) and have a single key pair?
I'm not even sure this last idea is even possible since I would have a user logging in from server A (ssh client) to server B (ssh server), where the ssh server's key pair is the same as the ssh client's...? Or is it that only the client presents the keys to the server, and this is possible?
I guess I need to hit the SSH book and read more on it, but I thought I would throw it out there and see what others suggest.