Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

We have a handful of developers and a dozen servers each with several accounts on them and manage our ssh public keys by manual ssh-copy-id.

Does anyone know of a tool/script to manage ssh authorizations to those hosts?

Some sort of central public-keys list, developer->account@server authorizations and means to deploy those keys with something like ssh-copy-id. I could think of some scripts that would do the job, but would be glad not to do so. And I couldn't find anything except complex Kerberos setups or some ssh.com 'Universal SSH Key Manager' brochure.

share|improve this question
Simple, single user key-management is explained here: superuser.com/a/8105/77079 –  flob Oct 5 '12 at 16:19
Sounds like a job for LDAP with all servers authenticating from there. –  UtahJarhead Oct 5 '12 at 16:33
I know how to set up SSH to get rid of passwords, but that question shows now way to manage keys / account@server authorizations for more than one server/user... it just shows how to do the login without a password. –  flob Oct 5 '12 at 16:52
add comment

1 Answer

up vote 1 down vote accepted

Wikimedia uses Puppet for this; see their admins.pp.

Kerberos is actually quite simple to set up.

share|improve this answer
That looks like a good start :) Thanks! –  flob Oct 5 '12 at 17:19
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.