Re: SSH Gateway

To: Kwame Bahena <informatux@gmail.com>

Subject: Re: SSH Gateway

From: Stuart Watson <strtwtsn@gmail.com>

Date: Tue, 7 May 2013 15:42:48 +0100

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=3RZeiO+MDfNeU7E89ZsRXJrQiq4Mw0n2LmKxlxC5H0w=; b=MF0LhasuFREEfDAjPo66Cq28QSWTmbsjaIM0DiiKVx2/eBVZ9ndGn2Z4vG8Q3ro4Cv eztkJYhxuuZ4RHNZda8XP0KZzChX8wWo+OUyEnNj9TRv14n5Cx39NJTni10N9Azhe7wz SBpOTL0ZHl3iBigiVaoc7rPptBzShyfhxxYxDz7PcuulC7vNeLb8e3qv26YQgAJCi6M8 v+++r/u0WXi4jnmmpRR9E6L0Wu3fIydUQLFcOhkrOvTWEtrrdxoFSm9iYX2AfmNF35vn 4njrgi/kAGHQJNzPDDH4Z/Chxhhx11VFL7dst9TUxM6e9E3JR4ZnfV8ozkEAm+i3QSkS t7cw==

In-reply-to: <CANtpaPqosAwxoO_pbd+UxvnPuczFc8E5hArONQGrhXE_N0Ff+Q@mail.gmail.com>

References: <CAASotFnKHy1CjRdJp5gY=t_wLEhrmajzp96VhzLvwMfT8A7L8Q@mail.gmail.com> <CANtpaPqosAwxoO_pbd+UxvnPuczFc8E5hArONQGrhXE_N0Ff+Q@mail.gmail.com>

At the moment this is still in the planning stage. ÂIt's all Ubuntu 10.04 LTS onwards.

Is it possible to do this without install openssh server on the OpenLDAP server?

On Tue, May 7, 2013 at 3:26 PM, Kwame Bahena <informatux@gmail.com> wrote:

Hi,Â

Your plan sounds accurate:

1. Yes
2. Yes

3. If you want your users to connect to the OpenLDAP server via ssh, then yes, you need to install ssh server on that box

4. Yes

What have you done so far? Which distro are you using?

Cheers!
--
Dan

On Tue, May 7, 2013 at 4:21 AM, Stuart Watson <strtwtsn@gmail.com> wrote:

Hi

I am looking at creating a SSH gateway using OpenLDAP. ÂThe idea is to store our devs public keys in OpenLdap, which would give us the ability to control who has SSH access to our servers.

Currently everyone shares the same key which means it is impossible to control access.

Do I just need to...

Install OpenLDAP
Import the public keys into OpenLDAP

Install OpenSSH Server on the OpenLDAP server and configure it to use LDAP.
Configutre the remote servers to use the OpenLDAP servers to authenticate

The the devs can ssh from their computers through the OpenLDAP server to the remote servers.

Can anyone help?

Thanks

Â

Follow-Ups:

Re: SSH Gateway
- From: Kwame Bahena <informatux@gmail.com>

References:

SSH Gateway
- From: Stuart Watson <strtwtsn@gmail.com>
Re: SSH Gateway
- From: Kwame Bahena <informatux@gmail.com>