mettke / ssh-key-authority Goto Github PK

Hey there, I was wondering what you thought about the following modification? Any side effects you can think of?

Essentially, there is a check and exception if a server has the same IP, but what if it is the same IP and different port, e.g. a docker container...

	echo date('c')." {$hostname}: Checking IP address {$server->ip_address}.\n";
	$matching_servers = $server_dir->list_servers(array(), array('ip_address' => $server->ip_address, 'key_management' => array('keys')));
	if(count($matching_servers) > 1) {

Checking port as well...

	echo date('c')." {$hostname}:{$server->port}: Checking IP address {$server->ip_address}.\n";
	$matching_servers = $server_dir->list_servers(array(), array('ip_address' => $server->ip_address, 'port' => $server->port, 'key_management' => array('keys')));
	if(count($matching_servers) > 1) {

Hello, I would like to know if the project is really maintained or not? Since I have been looking for something similar and open-source, but I have not found anything, and since I have not seen activity in the project for quite some time, I wanted to know if it is 100% operational or it is not recommended to use it.

Hi

Trying to deploy this on a K8S cluster. Do you have anything that would be available?
Thanks!

Hello, do you have to have any consideration when migrating from the source code of the Opera repository?

Hi,

wenn I configure LDAPS which uses a SelfSigned Certificate, I run into trouble. I cannot sync down new Users.
Is there a way to configure the CA certificate in the PHP backend?
Thx

If selinux is active you have to use this command to be able to sync:

chcon -R --type=ssh_home_t /var/local/keys-sync

Just to write it somewhere down

Hi,

do you have a full docker compose example with your Docker Hub Image available?
Or is this sufficient?

version: "3"

services:
  ska-db:
    image: mariadb
    container_name: ska-db
    restart: always
    environment:
      - MYSQL_ROOT_PASSWORD=password
      - MYSQL_DATABASE=ska-db
      - MYSQL_USER=ska-user
      - MYSQL_PASSWORD=password
    volumes:
      - ./db:/var/lib/mysql:rw
    networks:
      - proxy
  ska:
    image: toendeavour/ssh-key-authority
    container_name: ska
    restart: always
    ports:
      - "8088:80"
    depends_on:
      - ska-db
    volumes:
      - ./config:/ska/config
    networks:
      - proxy


networks:
  proxy:
    external: true

Hello I use Ubuntu 20.04 i followed your installation guide and at Point 7 always this error occures.
PHP Fatal error: Uncaught ErrorException: Trying to access array offset on value of type null in /var/www/ska/core.php:86
Stack trace:
#0 /var/www/ska/core.php(86): exception_error_handler()
#1 /var/www/ska/core.php(41): path_join()
#2 [internal function]: autoload_model()
#3 /var/www/ska/core.php(61): spl_autoload_call()
#4 /var/www/ska/core.php(28): setup_database()
#5 /var/www/ska/scripts/cron.php(4): require('/var/www/ska/co...')
#6 {main}
thrown in /var/www/ska/core.php on line 86
Did you already test your software on ubuntu server 20.04?
Apache 2.4.41
MariaDB 10.3.2.22
PHP 7.4.3

I run ssh-key-authority behind a reverse proxy (traefik) with baseurl = https://mydomain.com/ssh-key-authority/

When I add a new public key the redirect points to https://mydomain.com but not the configured baseurl (=https://mydomain.com/ssh-key-authority/)

Hi there i am having trouble with the LDAP Binding.
Users can only log in if they are in any group found in the dn_group configured in the config.ini file.
Is there any possibility to let them login nevertheless?

Hello Marc Mettke,

I would like to ask if you know of any way to add two factor authentication in the ssh key authority software? Any information on how we could do that would be appreciated.

Kind regards and thanks in advance,
Dries

Hi,

we have tried to run your latest docker-container (https://hub.docker.com/r/toendeavour/ssh-key-authority/).

We tried the following commands:

docker pull toendeavour/ssh-key-authority
docker run toendeavour/ssh-key-authority

OS: Ubuntu 20.04
Docker-Version: 19.03.8