Sign up ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Is it possible to authorize user based on provided login and password by connecting to remote SSH server?

If connection is successfully established and login-password pair is logged on the remote end, the user granted login access to the local machine.

I've heard that there is such PAM module, but now I can find only pam_ssh which manipulates (locally) on private keys.

share|improve this question
What would be the use case for this? Just curious. –  grawity Aug 21 '11 at 10:15
Look into Kerberos. –  Gilles Aug 21 '11 at 12:31
@gravity: simple domain login without extra infrastructure. –  Basilevs Aug 21 '11 at 12:34
You would still have to manually add the user account to all servers, and it would become impossible to use SSH pubkey authentication if you required a password for the authorization checks (did you mean "authenticate" in your post?), and it would still require the same amount of "extra infrastructure" (one password-checking server) as Kerberos, but with more complicated and less standard configuration... –  grawity Aug 21 '11 at 14:45 conclusion, it would not be as simple as it looks. –  grawity Aug 21 '11 at 14:51

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.