I am managing about 30 Linux (Ubuntu) servers and we have a team of 20 IT staff members. Different members have access to different servers.
Currently, we have one single user on each server and I'm adding public IP keys for each IT member on the server he needs to access. This is now becoming very hard to maintain especially for leaving employees where we need to maintain manual user lists.
I am looking for a centralized users management solution with session recording possibilities, and also a jump in server login. One jump server (+ one redundancy) will host the centralized users management. A web Gui is mandatory.
Until now, I have tested Keybox and Teleport. Currently reading about LDAP and FreeLPA.
Keybox: works well but no direct ssh login possible, only through their web interface
Teleport: WE're forced to use tlh instead of ssh, not sure our staff members would like and have time to install tsh, moreover, I didn' found tsh client for MAC
Looking froward to hearing from you.