ssh questions/issue

[bruce]

Hi/morn guys...

Searching for answers/opinions on how to allow multiple users to access a
number of different boxes via ssh, using ssh keys..

Say I have 5 boxes on my network,

box1
box2
box3
box4
box5

Each box has a generic user - user1, with limited perms/access

On my local box, i create a pub/private ssh key. I copy the pub key to each
box..

From my local box, I can then ssh -using the priv/pub key into box1.

From box1, can I then hop/ssh over to box2, using the pub key for the user1
that I created/installed?

I'm trying to figure out how I can hop between boxes as needed without
having to have lots of pub/private keys ...

(Viewed some articles that seem to indicate I can do this)

Thoughts/comments..

[Marcus Bean]

Yes, it is possible. I believe you would need to put the public key into
the authorized_keys file and install the keys on all of the boxes for user1.

On Thu, Jul 7, 2016 at 9:54 AM, bruce  wrote:
> Hi/morn guys...
>
> Searching for answers/opinions on how to allow multiple users to access a
> number of different boxes via ssh, using ssh keys..
>
> Say I have 5 boxes on my network,
>
> box1
> box2
> box3
> box4
> box5
>
> Each box has a generic user - user1, with limited perms/access
>
> On my local box, i create a pub/private ssh key. I copy the pub key to
> each box..
>
> From my local box, I can then ssh -using the priv/pub key into box1.
>
> From box1, can I then hop/ssh over to box2, using the pub key for the
> user1 that I created/installed?
>
> I'm trying to figure out how I can hop between boxes as needed without
> having to have lots of pub/private keys ...
>
> (Viewed some articles that seem to indicate I can do this)
>
> Thoughts/comments..
>
> --
> users mailing list
> [e-mail]
> To unsubscribe or change subscription options:
> https://lists.fedoraproject.org/admin/lists/[e-mail]
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org

[Cássio Pereira]

Try setting

ForwardAgent yes

on the ~/.ssh/config file for the host.

See a detailed guide here:
https://developer.github.com/guides/using-ssh-agent-forwarding/

Cheers.

On 7 July 2016 at 11:54, bruce  wrote:
> Hi/morn guys...
>
> Searching for answers/opinions on how to allow multiple users to access a
> number of different boxes via ssh, using ssh keys..
>
> Say I have 5 boxes on my network,
>
> box1
> box2
> box3
> box4
> box5
>
> Each box has a generic user - user1, with limited perms/access
>
> On my local box, i create a pub/private ssh key. I copy the pub key to
> each box..
>
> From my local box, I can then ssh -using the priv/pub key into box1.
>
> From box1, can I then hop/ssh over to box2, using the pub key for the
> user1 that I created/installed?
>
> I'm trying to figure out how I can hop between boxes as needed without
> having to have lots of pub/private keys ...
>
> (Viewed some articles that seem to indicate I can do this)
>
> Thoughts/comments..
>
> --
> users mailing list
> [e-mail]
> To unsubscribe or change subscription options:
> https://lists.fedoraproject.org/admin/lists/[e-mail]
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org