Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a handful of developers and a dozen servers each with several accounts on them and manage our ssh public keys by manual ssh-copy-id.

Does anyone know of a tool/script to manage ssh authorizations to those hosts?

Some sort of central public-keys list, developer->account@server authorizations and means to deploy those keys with something like ssh-copy-id. I could think of some scripts that would do the job, but would be glad not to do so. And I couldn't find anything except complex Kerberos setups or some 'Universal SSH Key Manager' brochure.

share|improve this question
Simple, single user key-management is explained here: – flob Oct 5 '12 at 16:19
Sounds like a job for LDAP with all servers authenticating from there. – UtahJarhead Oct 5 '12 at 16:33
I know how to set up SSH to get rid of passwords, but that question shows now way to manage keys / account@server authorizations for more than one server/user... it just shows how to do the login without a password. – flob Oct 5 '12 at 16:52
up vote 2 down vote accepted

Wikimedia uses Puppet for this; see their admins.pp.

Kerberos is actually quite simple to set up.

share|improve this answer
That looks like a good start :) Thanks! – flob Oct 5 '12 at 17:19

you may try secpanel. It has gui support for managing your keypairs and a gui for distributing keys to hosts.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .