Skip to content

Instantly share code, notes, and snippets.

@sarciszewski
Created October 2, 2014 16:06
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sarciszewski/bf25fb4b1d6aa78516f8 to your computer and use it in GitHub Desktop.
Save sarciszewski/bf25fb4b1d6aa78516f8 to your computer and use it in GitHub Desktop.
Random idea
_______________
| CLIENT SERVER | _________
| ============= | ______ / Service \___, user
| ~# | ------ \_________/
|_______________| | | \
user user user
A service has a SSH private key, for which the public key is installed on the client's server. Private keys are provisioned per client.
Local users authenticate somehow to the service which then forwards their SSH session onto the client's server without leaking the private key.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment