KeyManager

KeyManager is my tool to approach a single-sign-on system for SSH users, without having to pay for PowerBroker and whatnot.

The goal is for your users to authenticate once to one ‘master’ system, and then they have passwordless access to everywhere else.

The structure of KeyManager is to create a special Unix/Linux account, to which you delegate authority to remotely login to a set of your systems. You could create a ‘bob’ account, and authorize bob to login as root on your dev and QA systems, but only as ‘developer’ on your production systems. You could also create an ‘oracle’ account and authorize it to access all your systems running oracle.

To get involved with KeyManager, see my GitHub page at…