5 ms·
No you don't. Why would you need to modify PAM for SSH on port 22 but not SSH over TLS?
by DarylZero 5y ago
No you don't.
Why would you need to modify PAM for SSH on port 22 but not SSH over TLS?
- pphysch 5y agoBecause you completely handle authn/authz on the web backend instead of in PAM No one gets a shell until they get through your RBAC/ABAC solution
- DarylZero 5y agoThe question was: > Why would you need to modify PAM for SSH on port 22? I don't believe you have an answer.
- deleted 5y ago[deleted]
- pphysch 5y agoBecause in 2022 we have access to things like 2FA and ABAC and SSH certs to not get pwned. How do you intend on implementing those without Linux PAM or additional backend services??