Keeto Admin Guide

Table of Contents

• 1. About
• 2. Concept
• 3. Getting Started
  • 3.1. Prerequisites
  • 3.2. Installation
    • 3.2.1. Source
    • 3.2.2. RPM
  • 3.3. Configuration
    • 3.3.1. Keeto
    • 3.3.2. OpenSSH
    • 3.3.3. PAM
    • 3.3.4. Syslog
    • 3.3.5. Directory Service
• 4. LDAP Data Model
  • 4.1. SSH Server
  • 4.2. Access Profiles
    • 4.2.1. Direct Access Profile
    • 4.2.2. Access On Behalf Profile
  • 4.3. Key Provider
  • 4.4. Target Keystore
  • 4.5. Groups
  • 4.6. Keystore Options
• 5. Docker
  • 5.1. Overview
    • 5.1.1. Services
    • 5.1.2. OpenLDAP Settings
    • 5.1.3. MariaDB Settings
    • 5.1.4. OpenSSH Access Permissions
  • 5.2. Prerequisites
  • 5.3. Setup
  • 5.4. Usage
• 6. FAQ
  • 6.1. How can I exclude accounts from being processed by Keeto?
  • 6.2. Not all certificates/CRL’s in the certificate store are utilized
  • 6.3. Keeto doesn’t seem to check the LDAP server certificate chain against the CRL
  • 6.4. What is the real user exported to the environment actually?