Page MenuHomeVyOS Platform
Create Task
Maniphest T461

Central user/key management through JumpCloud
On hold, WishlistPublicFEATURE REQUEST
Actions

Description

Currently, users and their SSH public keys have to be managed on each and every individual VyOS installation. This is an inefficient process if one has to manage multiple VyOS boxes. For standard Linux distributions, there is a smart solution for that: JumpCloud.

JumpCloud offers Directory as a Service (DaaS), including an agent that can be installed on standard Linux distributions. Once this agent is installed on a Linux box, it registers the box with JumpCloud and allows users and their passwords as well as public keys to be managed centrally.

  • Want to change your password on all your Linux based compute instances? Just change your password in JumpCloud and it will propagate the change to all machines you are a user of.
  • Want to give a new user access to a group of compute instances? Just add the user to the appropriate machines or group of users and JumpCloud takes care of the rest. The new user will be able to log into the machines just a few seconds later.

How cool would it be to also be able to manage VyOS installations this way?

Thanks for considering this feature request.

Details

Difficulty level
Normal (likely a few hours)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Unspecified (please specify)

Event Timeline

Michael created this task.Nov 15 2017, 7:34 AM
c-po subscribed.Nov 15 2017, 9:50 AM

Thanks for this feature request. I'm not to happy having a cloud provider install some SSH keys onto my system. If you have to manage many VyOS machines, why not use Ansible?

Michael added a comment.Nov 15 2017, 11:34 AM

Thanks for your feedback. Maybe I should clarify the feature request a bit:

I would like to have the option to install the JumpCloud agent on my VyOS machines (so this would not be forced on anyone who doesn't need or want it). Look at it as complementary option to Ansible, supported by VyOS. As VyOS is based on Linux, this should be already possible in principle with the current JumpCloud agent. The issue are the details:

The JumpCloud installer is essentially a bash script that tries to identify the system in order to A) determine compatibility and B) register the corresponding repositories on that machine.

So JumpCloud would also have to support VyOS in the list of compatible OSes for this to work. It would require cooperation of VyOS and JumpCloud. Not sure if they are interested in this but I guess it would help them expand their device base, too, so to me this looks like a win-win. First question is though:

Are other VyOS users interested? ;-)

syncer subscribed.Nov 15 2017, 7:47 PM

I think we all will benefit from pluggable auth system,
all that remote system login sources (radius, tacacs+, active directory) must be easy (relatively) add if that required.

syncer triaged this task as Wishlist priority.Dec 21 2017, 9:16 PM
dmbaturin moved this task from Need Triage to Wishlist on the VyOS 1.2 Crux board.May 24 2018, 6:29 PM
dmbaturin edited projects, added VyOS 1.3 Equuleus; removed VyOS 1.2 Crux.Sep 2 2018, 9:32 PM
pasik subscribed.Mar 12 2019, 6:14 PM
dmbaturin edited projects, added VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.Dec 10 2020, 12:01 PM
dmbaturin set Is it a breaking change? to Unspecified (possibly destroys the router).
dmbaturin changed Difficulty level from Unknown (require assessment) to Normal (likely a few hours).Jan 27 2021, 6:45 PM
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
dmbaturin edited projects, added VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.Apr 12 2024, 3:25 PM
dmbaturin set Issue type to Unspecified (please specify).
syncer changed the task status from Open to On hold.Jun 15 2024, 6:38 PM