this post was submitted on 02 Apr 2025
51 points (98.1% liked)

Sysadmin

8477 readers
29 users here now

A community dedicated to the profession of IT Systems Administration

No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
[email protected]
[email protected]
[email protected]
[email protected]

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
51
Sysadmins, how do you store and manage passwords? (feddit.org)
submitted 2 days ago* (last edited 2 days ago) by [email protected] to c/[email protected]
56 comments fedilink hide all child comments
 

From a simple KeePass database to enterprise credential management solutions—what’s your setup at work?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 6 points 2 days ago (3 children)

As an admin for a Linux server, I want to institute a ssh pub key expiration policy for all the users and enforce non-reuse of old keys. Does anyone have a best solution for this?

[–] [email protected] 4 points 2 days ago

How do you do your pubkey deployments? If you use ansible, it should be simple enough.

[–] [email protected] 4 points 2 days ago* (last edited 2 days ago)

Sounds like certificates to me, but I don't know of any such solution

Edit: I found out that openssh allows the logon with a certificate. This guide shows how to setup a public key that expires after 52 weeks.