Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a handful of developers and a dozen servers each with several accounts on them and manage our ssh public keys by manual ssh-copy-id.

Does anyone know of a tool/script to manage ssh authorizations to those hosts?

Some sort of central public-keys list, developer->account@server authorizations and means to deploy those keys with something like ssh-copy-id. I could think of some scripts that would do the job, but would be glad not to do so. And I couldn't find anything except complex Kerberos setups or some 'Universal SSH Key Manager' brochure.

share|improve this question
Simple, single user key-management is explained here: – flob Oct 5 '12 at 16:19
Sounds like a job for LDAP with all servers authenticating from there. – UtahJarhead Oct 5 '12 at 16:33
I know how to set up SSH to get rid of passwords, but that question shows now way to manage keys / account@server authorizations for more than one server/user... it just shows how to do the login without a password. – flob Oct 5 '12 at 16:52
up vote 2 down vote accepted

Wikimedia uses Puppet for this; see their admins.pp.

Kerberos is actually quite simple to set up.

share|improve this answer
That looks like a good start :) Thanks! – flob Oct 5 '12 at 17:19

you may try secpanel. It has gui support for managing your keypairs and a gui for distributing keys to hosts.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.