Re:Teleport 4.3: Modern Replacement for OpenSSH
by cronos on Friday July 10, 2020 @12:56PM
(#23793542)
A "ton" of work may have been an exaggeration.
Maintaining a CA (and dealing with cert rotation) is some work.
Other things are indeed just a flag or config option (like jumphosts). But it takes work for a sysadmin/devops to educate all engineers in the company and make sure everyone uses the correct setup and doesn't end up dropping authorized_keys around random servers.
It's not that difficult technically as it is socially.
Re:Teleport 4.3: Modern Replacement for OpenSSH
by number6 on Friday July 10, 2020 @02:27PM
(#23794673)
Yeah, you are right about this. Just thought about a personal setup, but getting it all up and running in enterprise scape will be more work than just a few flags
Maintaining a CA (and dealing with cert rotation) is some work.
Other things are indeed just a flag or config option (like jumphosts). But it takes work for a sysadmin/devops to educate all engineers in the company and make sure everyone uses the correct setup and doesn't end up dropping authorized_keys around random servers.
It's not that difficult technically as it is socially.