[clug] Remote Authentication for Linux

Mark Suter suter-20080211 at clug.zwit.org
Wed Sep 1 12:11:13 UTC 2021


On 2021-09-01, jm wrote:	

> I'm still taking suggestions for this remote authentication ssh server	
> so if anyone wants to add one to the list or has any experience with	
> this please say something.	

Consider TrustedUserCAKeys with OpenSSH. Once the certificate authority	
(CA) is trusted on the remote host, your control of that CA means you	
can generate a user key that will authenticate as any user you want.	

The following Red Hat document seems reasonable, but your searches may	
find better results:	

  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/deployment_guide/sec-using_openssh_certificate_authentication	

--	
Mark Suter suter at zwitterion.org	
https://zwitterion.org/contacts	



More information about the linux mailing list