So there's an issue that we've been having at our company causing me to pull my hair out for the past week:
We have hundreds of server boxes (a mix of CentOS6/7, if it matters) that need to quickly be SSHed into on a daily basis between a team. Everyone is using mRemoteNG or SuperPutty as the ability to save and organize connection info as well as tabbed connections are a must have. Presently everyone is sharing a single SSH key to log into all boxes. Obviously our current practice is a terrible idea, so what we'd like to do is give each user an individual account and key to be used across the boxes.
Looking around, it seemed that Kerberos is a perfect option for managing multiple users and handling authentication across a la rge amount of servers. Unfortunately we seem to be having some issues in getting it to work the way we want. We were able to set up Kerberos to handle SSH connections for users with passwords, but when it came to disabling passwords and using SSH keys, we couldn't figure it out.
We looked into using Kerberos keytabs as well, howevever we could not get them to work via PuTTY or find a viable solution to save connection info and have tabbed connections with keytabs.
The main question here is: Can Kerberos be used to manage SSH users with SSH keys? If not, is there a build of PuTTY available that works with Kerberos keytabs, or an alternative that can organize and have tabbed connections? Thanks!