Re:Show HN: Teleport – SSH for Clusters and Teams
by en4bz on Thursday March 24, 2016 @10:33PM
(#11358154)
How is this any different from the very common LDAP + Kerberos + RADIUS solution that is usually deployed in large companies. This seems like it's re-inventing things that already exist and have been used successfully for years. It seems to me that a tool that makes deployment of LDAP/RADIUS/Kerberos easier would be more practical.
[ Parent
| on HN ]
Re:Show HN: Teleport – SSH for Clusters and Teams
by aren on Friday March 25, 2016 @01:07AM
(#11358584)
Congrats to the Gravitational team on teleport! LDAP/RADIUS/etc are often useful only for internal employee access. Teleport brings (among other things) a new level of flexibility for secure remote management (say, by a vendor perhaps), so I don't see it as a replacement for the traditional auth protocols.
In terms of making LDAP/RADIUS easier, well, we're a YC company that does just that! Foxpass (S15) https://www.foxpass.com/.
Re:Show HN: Teleport – SSH for Clusters and Teams
by alexk on Friday March 25, 2016 @12:32AM
(#11358492)
Hey, that's a good question and a valid concern. Teleport's auth server is designed to be extendable and we plan to add support for a variety of existing authentication and authorization protocols in the upcoming releases based on community feedback and requests.
We use existing 2FA HOTP based access control in the first release mostly to get a good quick start experience and we understand that big organizations will plug in Teleport into their existing auth infrastructure.