To setup the user-based reverse proxy the following steps should be performed.
- Create a key-pair for password-less login on the ssh-server using
ssh-keygen - setup syncronization of
authorized_keysfor the proxied users- If the syncronization should be done via scp, add the public
key of the ssh-server to the gateways'
authorized_keys. It is recommended to call the syncronized variantauthorized_keys2
- If the syncronization should be done via scp, add the public
key of the ssh-server to the gateways'
- Install
sshproxy_gateway - setup
~/ssh/proxy/gateway.conf, a sample file is shipped - symlink the name of the ssh-application to
sshproxy_gateway
- If syncronization should be done via scp, create a key-pair using
ssh-keygen - Install
sshproxy_host - add
command="/usr/bin/sshproxy_host",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty ssh-rsa ...to the (not syncronized!)authorized_keysfile - maybe setup path of
authorized_keysin your application. the nameauthorized_keys2is recommended for that file
The complete discussion of the problem can be seen in the Wiki