You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Thanks for this project, it's a nice improvement over pam_ssh_agent_auth, since it properly supports -sk keys. The one thing that seems to be missing is a form of AuthorizedKeysCommand, which makes it possible to integrate SSH with an external data source (e.g. AD/OpenLDAP/similar or a solution like privacyIdea). pam_ssh_agent_auth does support both an authorized_keys_command and authorized_keys_command_user parameter to run a command which fetches the SSH keys for a provided user. The command is run as the user in authorized_keys_command_user and is supplied with a single argument, the username, and then emits to stdout the SSH keys in authorized_keys format (see the pam_ssh_agent_auth manpage).
The text was updated successfully, but these errors were encountered:
Thanks for this project, it's a nice improvement over
pam_ssh_agent_auth
, since it properly supports-sk
keys. The one thing that seems to be missing is a form ofAuthorizedKeysCommand
, which makes it possible to integrate SSH with an external data source (e.g. AD/OpenLDAP/similar or a solution like privacyIdea).pam_ssh_agent_auth
does support both anauthorized_keys_command
andauthorized_keys_command_user
parameter to run a command which fetches the SSH keys for a provided user. The command is run as the user inauthorized_keys_command_user
and is supplied with a single argument, the username, and then emits to stdout the SSH keys inauthorized_keys
format (see thepam_ssh_agent_auth
manpage).The text was updated successfully, but these errors were encountered: