Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to authorize user based on provided login and password by connecting to remote SSH server?

If connection is successfully established and login-password pair is logged on the remote end, the user granted login access to the local machine.

I've heard that there is such PAM module, but now I can find only pam_ssh which manipulates (locally) on private keys.

share|improve this question
What would be the use case for this? Just curious. – grawity Aug 21 '11 at 10:15
Look into Kerberos. – Gilles Aug 21 '11 at 12:31
@gravity: simple domain login without extra infrastructure. – Basilevs Aug 21 '11 at 12:34
You would still have to manually add the user account to all servers, and it would become impossible to use SSH pubkey authentication if you required a password for the authorization checks (did you mean "authenticate" in your post?), and it would still require the same amount of "extra infrastructure" (one password-checking server) as Kerberos, but with more complicated and less standard configuration... – grawity Aug 21 '11 at 14:45 conclusion, it would not be as simple as it looks. – grawity Aug 21 '11 at 14:51

You must log in to answer this question.

Browse other questions tagged .