SSH Keys or Ask-pass opinion

[James Jelinek]

I currently have a set of VMs I'm testing Ansible on and use SSH keys to automate the authentication process. I'm admittedly a bit old-school and prefer using something like ask-sudo-pass and running the tasks as a sudo user. I just wanted to get an opinion on pros/cons of using Keys versus prompting for the pass?

What is everyone else doing? It seems to make sense to automate via keys, but I seem to fallback to prompting for a password.

-James

[Brian Coca]

I use keys AND prompt for sudo password. My machines don't allow password logins.

I'm also in the process of removing 'shared' users for logins.

--
Brian Coca
Stultorum infinitus est numerus
0110000101110010011001010110111000100111011101000010000001111001011011110111010100100000011100110110110101100001011100100111010000100001

Pedo mellon a minno

[James Jelinek]

That's a solid strategy.  I'm most likely going to disable password auth via ssh and stick to keys as well.  But I think I'll run everything as a sudo user and prompt for sudo password as you do.

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.