Hacker GitHub

← All repos

hashicorp/vault-ssh-helper

View on GitHub ↗ ★ 447 Go

Vault SSH Agent is used to enable one time keys and passwords

4 mentions on Hacker News by 3 people: 0 stories, 4 comments · first 2016-09-28 · latest 2019-04-20

Mentions per year 4 mentions · busiest year 2016 (2)
20082026
AllStoriesComments NewestTopOldest
  1. …You also have to configure the servers to support Vault, using their PAM integration: https://github.com/hashicorp/vault-ssh-helper
    comment by druiid · 2019-04-20 · in Hardening SSH with 2FA
  2. HashiCorp Vault also supports that scenario: https://github.com/hashicorp/vault-ssh-helper . The main downside is that if the Vault instance is down, nothing can be SSHed into.
    comment by zimbatm · 2018-09-22 · in Introducing the Librem Key
  3. A somewhat related tool is Vault SSH Helper: https://github.com/hashicorp/vault-ssh-helper It provides an audit log (without session history/playback) and one-time passwords for login. It avoids copying of ssh certificates to every host,…
    comment by sandstrom · 2016-12-28 · in Teleport 1.3 adds support for SSH authentication with U2F keys
  4. …It enables one time passwords and password issuing can itself be tied to 2-factor, etc. [1] https://github.com/hashicorp/vault-ssh-helper
    comment by sandstrom · 2016-09-28 · in Teleport – Modern SSH server for clusters and teams