Question for you all: There's a certain machine (let's call it

Question

Question for you all: There's a certain machine (let's call it

machine X), I want specific users to have access to this machine but in case I need to I want to remove them. So user Bob can login to a machine X, the login is done via ssh key, but in case I need I can remove Bob entirely from machine X. I want something reliable and scalable in the case of multiple machines.
At first I thought about adding machine Y, so only machine Y would have access to machine X. People would connect to machine Y to then connect to machine X, in case I have to remove someone I just remove them from machine Y, since they never had direct access to machine X in the first place. There could be a possibility where more than 1 users need access to that machine but only for a short amount of time, I'd like to avoid creating ssh keys just for them only to remove them after a short time. What would you recommend here?

0

13.08.2022