11–20 of 57 posts
This is the kind of thing I currently use Ansible for. Is there a big advantage to using KeyBox for this instead?
Also the multiple terminal session stuff is rather useful in an emergency patch across a ton of servers. (Drupal patch last month it was very handy)
Single point of compromise. :( I wish people would just stop with these things. The appropriate way to be able to manage many users is called LDAP, it's been LDAP for decades and it's unlikely to change. These days it's super easy to use SSH keys with LDAP, still using the standard openssh-lpk schema but now not requiring any patches to OpenSSH itself, just need to use the AuthorizedKeysCommand and an appropriate hel…
The thing about keybox is that it's nice and fast to get better. For someone that doesn't have an ops team, or even an ops person, it is a neat solution. Yes you need to be careful with it, I ran it on an internal VM, with only 2 users who had access to the admin console. I'd love to see something as simple to use as keybox based around LDAP, I've had a google and can't see anything.
Single point of compromise. :( I wish people would just stop with these things. The appropriate way to be able to manage many users is called LDAP, it's been LDAP for decades and it's unlikely to change. These days it's super easy to use SSH keys with LDAP, still using the standard openssh-lpk schema but now not requiring any patches to OpenSSH itself, just need to use the AuthorizedKeysCommand and an appropriate hel…
Adding the browser to the mix won't make it much more secure, I fear.
http://sshkeybox.com/img/keybox_dia.jpg
Not only does it create a single point of failure in the Administration, but the third case illustrates that this is some kind of feature, advertising blocking normal SSH traffic to the server network, instead replacing it with HTTPS traffic.
Please don't do this. Just accept SSH and learn to deal with it. If you can't, maybe systems administration is not for you and you should pay someone to do it.
So, fanterm[1] for the web. [1]: http://www.stearns.org/fanout/README.html
This is the kind of thing I currently use Ansible for. Is there a big advantage to using KeyBox for this instead?
