I set up LDAP with sshPublicKey extension in 2021 together with some scripts to configure new servers to use it and a small command line tool to add and remove GIDs per user (across any infrastructure). It's working great. The biggest effort was learning to manage LDAP, which is a bit anachronistic, but the payoff is worth it I think. Even with <20 users, managing public keys across all of our infrastructure was not sustainable.
Comments
I set up LDAP with sshPublicKey extension in 2021 together with some scripts to configure new servers to use it and a small command line tool to add and remove GIDs per user (across any infrastructure). It's working great. The biggest effort was learning to manage LDAP, which is a bit anachronistic, but the payoff is worth it I think. Even with <20 users, managing public keys across all of our infrastructure was not sustainable.