Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to authorize user based on provided login and password by connecting to remote SSH server?

If connection is successfully established and login-password pair is logged on the remote end, the user granted login access to the local machine.

I've heard that there is such PAM module, but now I can find only pam_ssh which manipulates (locally) on private keys.

share|improve this question
    
What would be the use case for this? Just curious. – grawity Aug 21 '11 at 10:15
1  
Look into Kerberos. – Gilles Aug 21 '11 at 12:31
    
@gravity: simple domain login without extra infrastructure. – Basilevs Aug 21 '11 at 12:34
    
You would still have to manually add the user account to all servers, and it would become impossible to use SSH pubkey authentication if you required a password for the authorization checks (did you mean "authenticate" in your post?), and it would still require the same amount of "extra infrastructure" (one password-checking server) as Kerberos, but with more complicated and less standard configuration... – grawity Aug 21 '11 at 14:45
    
...in conclusion, it would not be as simple as it looks. – grawity Aug 21 '11 at 14:51

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.