search

XSEDE / oauth-ssh

SSH with Globus Auth
Apache License 2.0
28 stars 11 forks source link

Allow server install without DNS TXT record requirement #54

Open lliming opened 4 years ago

lliming commented 4 years ago

The server installation currently requires the admin to create a DNS TXT record for the server FQDN containing the server's Auth client ID. This is so the server's FQDN can be registered with Globus, such that clients can request the OAuth2 scope for the SSH service using the server's FQDN. (The alternative is that the client must know the server's client ID, requiring out-of-band coordination between server and client.)

There are deployment scenarios where the client DOES know the server's client ID, and where setting a DNS TXT record is impossible for the server admin. (For example, if the SSH server is being deployed on a cloud host and the admin doesn't have DNS administrative rights or a privately administered DNS domain.) In this case, it would be reasonable to allow the server install without requiring the DNS TXT record and without registered the FQDN with Globus.

tscollins-nygc commented 4 years ago

I just want to say that I always find the requirement for a FQDN to be annoying especially when just trying to test/evaluate something. It would be much better if a servers external IP address could be used.