4 ms·
Does this allow me to ssh into my server, for example, a shell server on the internet? If so, how does the server contact my phone? Through your server, right
by daveloyall 9y ago
Does this allow me to ssh into my server, for example, a shell server on the internet?
If so, how does the server contact my phone? Through your server, right?
What software do I install on the server for that?
- 4kevinking 9y agoKryptonite allows you to use SSH on your computer, but authenticate with a private key protected on your phone. It doesn't require any changes to the server, just the Kryptonite app and our workstation software.
- daveloyall 9y agoI found the answer on your blog: > Our system consists of three components: > (1) the Kryptonite phone app for iOS and Android, > (2) the krd daemon that runs in the background on a macOS or Linux computer, and > (3) the kr command line utility that manages krd. ...from https://blog.krypt.co/the-kryptonite-architecture-a385e7aaa336 https://blog.krypt.co/the-kryptonite-architecture-a385e7aaa3... Sounds like `krd` is why I likely won't be using this. Try implementing it as a PAM module or something. [edit: formatting]
- daveloyall 9y agoOk, `krd` is an alternative `ssh-agent`, I see. So my suggestion re: PAM is irrelevant because you aren't changing the server, you're changing the client. Ok, I'm interested ...maybe... I'll wait until people more familiar with ssh-agent chime in. :)
- finnn 9y agoAn SSH agent is the correct way to provide access to private SSH keys, just like OpenSSH's ssh-agent does. I could be wrong but I'm not aware of any way to implement this as a PAM module, unless it was something that was installed on all the servers you SSH'd into, which would be super annoying to setup.