1

Is it possible to setup a password-less ldap user login? I'd like to create a user that runs batch jobs with sudo rights. So it can ssh to multiple machines and run jobs without using ssh-keygen, and only root has rights to modify it. This way I don't need to expose root password or expose root ssh on multiple machines. I could achieve this using local created logins. Is it possible I can create this in LDAP?

5

Even if this was possible, it is a horrible idea.

Just use key authentication. That is the canonical way to allow programmatic access via ssh from one system to another.

2
  • thanks for the reply. On first thought, it wasn't such a bad idea. But I guess ssh-keygen does allow another level of restrictions on a system to protect misuse... – surfcode Jul 12 '16 at 2:54
  • Right, and it's not brute-forcible. – EEAA Jul 12 '16 at 2:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.