Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Dec 2013 16:02:00 -0500
From:      Aleksandr Miroslav <alexmiroslav@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   which is better for sudo: ldap accounts or sudo auto via ssh keys?
Message-ID:  <CACcSE1wxd3fmV+xNTpa1LDLS+mausd6vBHX3Yui8KyuU=EwCVQ@mail.gmail.com>

Next in thread | Raw E-Mail | Index | Archive | Help
I have a bunch of servers that I'm trying to tighten down.

>From a security standpoint, which would be more secure:

- having users login from an ldap account and use that same password
to authorize themselves to sudo


- or do away with passwords entirely and have them login with ssh keys
only (easy to do) and then authenticate to sudo with ssh keys (from a
search, apparently this is doable). I would also like to enforce that
the ssh-keys have passwords on them

thanks,
Alex



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?CACcSE1wxd3fmV+xNTpa1LDLS+mausd6vBHX3Yui8KyuU=EwCVQ>