jbeverly / pam_ssh_agent_auth

Moving pam_ssh_agent_auth to github as primary development location
Other
99 stars 29 forks source link

How to define username? #9

Open aubreybox opened 6 years ago

aubreybox commented 6 years ago

Hello I want to try to use that module for authenticating with pam and sasl. Is it possible to affect the username so that I can bind a (maybe different) username to a public key? Is there any documentation on how to adapt this module?

Basically the idea is that bob@client connects password less to alice@server without actively mentioning he's alice - that information would be stored serverside (e.g. username:key-database)

jbeverly commented 6 years ago

I think this may be provided by another pam module called pam_alias. Note that the order in the pam stack would matter a great deal since this module uses PAM_USER and PAM_RUSER.

Also, I'm incredibly intrigued about your use case. If you get this working, would you mind giving more details on how you're using this with sasl?

Thanks!