3

I want to manage the members of our team who are able to log into our cloud-hosted VMs, both Linux and Windows. We currently use G Suite and GitHub, to manage access to our code and documentation etc. I would really prefer to not have to also manage a separate Active Directory Domain within our VNets or deal with revoking ssh keys or updating multiple usernames/passwords on every single VM we deploy.

Are there ways to use either GSuite or Github to control login access to our VMs?

If there isn't, what are the best practices to deal with 20+ developers who are all empowered with DevOps responsibilities?

3

I would really prefer to not have to also manage a separate Active Directory Domain within our VNets

You've already found the answer: centralized authentication.

If you use a tool like Okta, you can indirectly tie GSuite to AD (or an LDAP server). And then of course you can tie OpenSSH there as well.

or deal with revoking ssh keys

Centralized authentication solves this.

or updating multiple usernames/passwords on every single VM we deploy.

And this as well.

You've already got the answer, even if you don't like it.

| improve this answer | |
  • None of your links and nothing in your answer actually shows how its possible to use Okta to log into a windows or linux machine. It looks like Okta just syncs with Active Directory to let you log into apps. – avi Dec 19 '17 at 7:56
  • 1
    @avi and then it's the usual matter of login with an ad account which is the replica of a g-suite account, pbis-open does this for linux, windows does allow login toward a windows Active Directory obviously... – Tensibai Dec 19 '17 at 8:51
  • 1
    @avi I added a link to serverfault.com/q/23632/12214 which talks about that. – Xiong Chiamiov Dec 19 '17 at 21:38
  • I'm still not understanding the answer. Will I need to maintain a list of Active Directory users, and give them individual permissions and logins, or will it just use the Gsuite credentials directly? – avi Dec 21 '17 at 8:03
  • @avi You'd manage users in AD, and then Gsuite users get created automatically from there. – Xiong Chiamiov Dec 26 '17 at 18:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.