keymanager

SSH Key manager, powered by fabric

When controlling access to various servers for various people, it can become quite difficult/tedious to manage, for some people its acceptable to pass around one common keyfile, but this presents the problem that if any user ever leaves, the keyfile will need replacing, and re-distributing to all users.

A way to get around this problem, and be generally more secure, is to use individual public keys, if a user needs access to one or more servers, they give you their public key, and you put it into the authorized_keys file on the user account/server they need access to.

Doing this manually, e.g:

ssh user@host
echo "ssh-rsa KEY_HASH user@host" >> ~/.authorized_keys

Can become tedious to manage, so I wrote a manager that allows you to manage keys on multiple servers very easily, it uses the already amazing fabric library.

Setup (production)

pip install git+git://github.com/farridav/keymanager.git

* Will be on pypi soon, see Issue 2

Setup (development)

Clone the project

git clone git@github.com:farridav/keymanager.git
cd keymanager

Install requirements

pip install -r test-requirements.txt

Run the tests

nosetests

Using it

List available commands

keymanager

Get more details/examples for a command (same as fabric)

keymanager -d <task_name>

List users

keymanager list --hosts user@host,otheruser@otherhost

Add a new user

User prompt

keymanager add --hosts user@host

By path to key

keymanager add:~/.ssh/id_rsa.pub --hosts user@host

By direct key

keymanager add:ssh-rsa KEY_HASH user@host --hosts user@host

Batch Add Users

Add a list of users

keymanager add_batch:~/.ssh/keys_list.txt --hosts user@host

Adding a list of users, removing those listed (confirmation required)

keymanager add_batch:~/.ssh/keys_list.txt,replace=True --hosts user@host

Use the force argument to avoid user input

keymanager add_batch:~/.ssh/keys_list.txt,replace=True,force=True --hosts user@host

Delete a user

User prompt

keymanager delete --hosts user@host

By Username

keymanager delete:user@host --hosts user@host

Batch Delete Users

Delete a list of users (confirmation required)

keymanager delete_batch:~/.ssh/keys_list.txt --hosts user@host

Use the force argument to avoid user input

keymanager delete_batch:~/.ssh/keys_list.txt,force=True --hosts user@host