1

We have a handful of developers and a dozen servers each with several accounts on them and manage our ssh public keys by manual ssh-copy-id.

Does anyone know of a tool/script to manage ssh authorizations to those hosts?

Some sort of central public-keys list, developer->account@server authorizations and means to deploy those keys with something like ssh-copy-id. I could think of some scripts that would do the job, but would be glad not to do so. And I couldn't find anything except complex Kerberos setups or some ssh.com 'Universal SSH Key Manager' brochure.

3
  • Simple, single user key-management is explained here: superuser.com/a/8105/77079
    – flob
    Oct 5, 2012 at 16:19
  • Sounds like a job for LDAP with all servers authenticating from there. Oct 5, 2012 at 16:33
  • 2
    I know how to set up SSH to get rid of passwords, but that question shows now way to manage keys / account@server authorizations for more than one server/user... it just shows how to do the login without a password.
    – flob
    Oct 5, 2012 at 16:52

2 Answers 2

2

Wikimedia uses Puppet for this; see their admins.pp.

Kerberos is actually quite simple to set up.

0
0

you may try secpanel. It has gui support for managing your keypairs and a gui for distributing keys to hosts.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .