Is it possible to authorize user based on provided login and password by connecting to remote SSH server?

If connection is successfully established and login-password pair is logged on the remote end, the user granted login access to the local machine.

I've heard that there is such PAM module, but now I can find only pam_ssh which manipulates (locally) on private keys.

  • What would be the use case for this? Just curious. – grawity Aug 21 '11 at 10:15
  • 1
    Look into Kerberos. – Gilles Aug 21 '11 at 12:31
  • @gravity: simple domain login without extra infrastructure. – Basilevs Aug 21 '11 at 12:34
  • You would still have to manually add the user account to all servers, and it would become impossible to use SSH pubkey authentication if you required a password for the authorization checks (did you mean "authenticate" in your post?), and it would still require the same amount of "extra infrastructure" (one password-checking server) as Kerberos, but with more complicated and less standard configuration... – grawity Aug 21 '11 at 14:45
  • ...in conclusion, it would not be as simple as it looks. – grawity Aug 21 '11 at 14:51

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.