Score:0

Single SSH login for multilpe machines?

it flag

I have a number of physical (desktop) machines running at the office as part of a new network to handle processing & serving Open Source data; some of these machines also house VMs.

At the moment, if an employee wants admin access to this network, I have to manually create accounts on each machine and set up the SSH key for each one (~12 in all).

Is it possible to introduce a new machine that can act as an SSH login node, that once logged into will allow access to all the other machines? Could it also allow new accounts to be created and configured on the login node, then propagate that to the "compute" nodes?

I can handle administrating a single Unix node, but networking them is new to me. What technologies would I need to handle this (if it's possible)?

Thanks in advance!

Michael Hillman avatar
it flag
Note that each of these desktop machines have their own setup and run a variety of software (some have databases, some websites, some run simulations etc.). I don't need to run commands across multiple machines, just looking for a way to ease the SSH configuration.
djdomi avatar
za flag
you looking for LDAP
Score:1
in flag

Adding those users to each machine will turn into a PITA! Most people would hook them into the AD forest or perhaps implement some other proper LDAP solution. You could always go backwards and implement NIS I suppose? Worst case, just SCP the /etc/passwd, /etc/shadow and /etc/groups to each node after you've added the users to one. Nowdays Ansible is the cool thing and it would likely help you do a number of other things that will ultimately have to be done on each machine in your fleet at some point or another.

Adding local accounts on each machine works, but this may turn into an issue down the road. Why we have NIS, LDAP & AD. One place to go to deactivate a user and its reflected across your entire fleet. If you get any of the standard industry security audits, you will likely fail unless you implement a common access and authorization solution like LDAP or AD.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.