Teleport
Infrastructure
ssh access management
SHOW HN2016
How HN took it
4 positive, 29 neutral or asking, 2 mixed, 5 critical, out of 40 comments about the project. Thread score -0.01.
Idea: 1 for, 3 againstExecution: 1 for, 1 againstDocs: 1 for, 0 againstPrivacy: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Good direction for access management and a cleanly designed system
From 2 comments
Awesome project! This is a step in the right direction for better access management.
Shamiq on HNOne thing of note: though they do say it's "fully compatible with OpenSSH", it is not compatible with ed25519 keyed SSH, as Golang SSH does not support it. Otherwise looks like a…
microcolonel on HN
Session recording and replay is useful
From 2 comments
This solves a problem we were looking at my last job: recording and replaying sessions. Identity management and bastion setup are solved problems, but it is nice to have an all…
pritambaral on HN> 1) How does session archiving work with non-line-oriented applications? (e.g. top and its brethren) We capture and replay the whole stream, so playback works well with…
alexk on HN
Objections
Claims of OpenSSH compatibility overstated; no ed25519 support in Go SSH
From 3 comments
Actually not quite fully, it does not appear that go ssh supports ed25519.
newman314 on HNOne thing of note: though they do say it's "fully compatible with OpenSSH", it is not compatible with ed25519 keyed SSH, as Golang SSH does not support it. Otherwise looks like a…
microcolonel on HNHey, good catch - "fully compatible" was an overstatement, so we've updated the landing page!
alexk on HN
Reinvents LDAP/Kerberos/RADIUS which already exist
From 1 comment
How is this any different from the very common LDAP + Kerberos + RADIUS solution that is usually deployed in large companies. This seems like it's re-inventing things that…
en4bz on HN
Odd mix of features in one tool
From 1 comment
So, they implemented Active Directory/RADIUS, a terminal proxy, screen, and a web gui? Does this not seem to anyone else like a weird mix of features for one tool?
peterwwillis on HN
Requests
Debian/brew/pkgsrc packaging
From 2 comments
Thanks for releasing this. Any plans to package via brew or apt?
LukeHoersten on HNI'd much rather see it in pkgsrc than brew. Then it can easily be applied to the *BSDs and SmartOS.
doublerebel on HN
Ansible Galaxy role and deeper automation integration
From 1 comment
Is this compatible with deployment automation systems like Ansible? Do you have any plans to write an Ansible Galaxy role for installation?
pmuk on HN
Support for mosh or SFTP
From 2 comments
Looks awesome! does it support mosh by any chance?
ukd1 on HNIt would be nice if it made backups of small files uploaded/deleted/modified through SFTP. That, along with the session history, would allow recovery from accidental deletion or…
visarga on HN
Questions
How authentication works with auto scaling nodes
From 1 comment
This looks like a really cool project. I'm excited to see it develop. How would authentication work with configuration management? I see that new nodes are authenticated with a…
gfloyd on HN
Whether it runs a server on every host or uses existing OpenSSH
From 2 comments
This solves a problem we were looking at my last job: recording and replaying sessions. Identity management and bastion setup are solved problems, but it is nice to have an all…
pritambaral on HNSure: 1. You don't have to. http://gravitational.com/teleport/docs/admin-guide/#using-teleport-with-openssh 2. It uses existing SSH protocol features, that's why OpenSSH clients…
old-gregg on HN
Whether it can run commands across many servers
From 1 comment
Can teleport run the same command on a group of servers, then collect the output and prefix it with the name of the server it came from? For example we could run a "df" on a…
visarga on HN
Alternatives named
Ansible and ansible-shell
From 2 comments
Ansible-shell can do that. (https://github.com/dominis/ansible-shell/blob/master/README.md)
mikeokner on HNSure, Ansible works in it's OpenSSH client mode, check out https://gravitational.com/teleport/docs/admin-guide/#using-teleport-with-openssh - Ansible section We are also thinking…
alexk on HN
LDAP, Kerberos and RADIUS
From 1 comment
How is this any different from the very common LDAP + Kerberos + RADIUS solution that is usually deployed in large companies. This seems like it's re-inventing things that…
en4bz on HN
goteleport (petar/goteleport)
From 1 comment
This name ("teleport") is really close to this other piece of software, which looks to be very much in the same space: https://github.com/petar/goteleport
philsnow on HN