Date: Thu, 26 Dec 2013 16:02:00 -0500 From: Aleksandr Miroslav <alexmiroslav@gmail.com> To: freebsd-questions@freebsd.org Subject: which is better for sudo: ldap accounts or sudo auto via ssh keys? Message-ID: <CACcSE1wxd3fmV%2BxNTpa1LDLS%2Bmausd6vBHX3Yui8KyuU=EwCVQ@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
I have a bunch of servers that I'm trying to tighten down. >From a security standpoint, which would be more secure: - having users login from an ldap account and use that same password to authorize themselves to sudo - or do away with passwords entirely and have them login with ssh keys only (easy to do) and then authenticate to sudo with ssh keys (from a search, apparently this is doable). I would also like to enforce that the ssh-keys have passwords on them thanks, Alex
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CACcSE1wxd3fmV%2BxNTpa1LDLS%2Bmausd6vBHX3Yui8KyuU=EwCVQ>