Hacker News new | ask | show | jobs
by midasuni 907 days ago
Can’t do that in some cases. Tacacs for example doesn’t allow for private keys
2 comments
nixgeek 907 days ago
I’ve worked at more than one place where you SSH into a Linux host (often just for that datacenter) using certificate-based authentication, only to be printed a JIT (just in time) password for TACACS-based usage in that datacenter, and which is only valid for a few minutes.

Workarounds are many for network devices it seems!

link
vinay_ys 907 days ago
Don't use that then. Tell that vendor their security posture is bad.
link
blueflow 907 days ago
Its Cisco. They already know that.
link