4 ms·
I found the answer on your blog: > Our system consists of three components: > (1) the Kryptonite phone app for iOS and Android, > (2) the krd d
by daveloyall 9y ago
I found the answer on your blog:
> Our system consists of three components:
> (1) the Kryptonite phone app for iOS and Android,
> (2) the krd daemon that runs in the background on a macOS or Linux computer, and
> (3) the kr command line utility that manages krd.
...from https://blog.krypt.co/the-kryptonite-architecture-a385e7aaa336 https://blog.krypt.co/the-kryptonite-architecture-a385e7aaa3...
Sounds like `krd` is why I likely won't be using this.
Try implementing it as a PAM module or something.
[edit: formatting]
- daveloyall 9y agoOk, `krd` is an alternative `ssh-agent`, I see. So my suggestion re: PAM is irrelevant because you aren't changing the server, you're changing the client. Ok, I'm interested ...maybe... I'll wait until people more familiar with ssh-agent chime in. :)
- finnn 9y agoAn SSH agent is the correct way to provide access to private SSH keys, just like OpenSSH's ssh-agent does. I could be wrong but I'm not aware of any way to implement this as a PAM module, unless it was something that was installed on all the servers you SSH'd into, which would be super annoying to setup.