2

Imagine you're working on a project and you have the need to support SSH access to several Linux servers used in a project. How could I make sure that 30+ users could log into each system using a unique SSH key assigned only to them, in the most efficient /secure manner for users?

This question extends from a Docker project I worked on last semester which had us create login information for users, but we built a GUI component that rather than SSH access to servers for the application. I am now wondering how one could just do it through SSH access for the users needing to gain access to their account.

This is particularly relevant since I know I have SSH access to school servers running Ubuntu, so I am wondering how they were able to do it.

My thought process:

In the simplest terms, we can create users that are allowed to log in and connect through the Linux servers, and they share the same access file. These files would then have a list of authorized_keys, which match to the 30+ users able to log into them. The Linux servers then refer to the same login information, so all users could log into all of these several servers.

Is this correct? Any guidance or specific notes would be appreciated because I am just overwhelmed with how much to read on it.

closed as too broad by Thomas Dickey, phk, Michael Homer, Kusalananda, G-Man May 22 '17 at 0:41

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

0

Yes you can copy the ~/.ssh/authorized_keys file/s containing the public user keys from server to server.

Let's assume you've one user account called dev on the server, all 30+ users would login as user dev by signing in with their private keys verified via the public keys in the /home/dev/.ssh/authorized_key file on the server.

Not the answer you're looking for? Browse other questions tagged or ask your own question.