1

Is it possible to setup a password-less ldap user login? I'd like to create a user that runs batch jobs with sudo rights. So it can ssh to multiple machines and run jobs without using ssh-keygen, and only root has rights to modify it. This way I don't need to expose root password or expose root ssh on multiple machines. I could achieve this using local created logins. Is it possible I can create this in LDAP?

Improve this question

1 Answer 1

Reset to default
5

Even if this was possible, it is a horrible idea.

Just use key authentication. That is the canonical way to allow programmatic access via ssh from one system to another.

Improve this answer
2
  • thanks for the reply. On first thought, it wasn't such a bad idea. But I guess ssh-keygen does allow another level of restrictions on a system to protect misuse...
    – surfcode
    Jul 12, 2016 at 2:54
  • Right, and it's not brute-forcible.
    – EEAA
    Jul 12, 2016 at 2:54

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .