4 ms·
I haven't used SSSD due it not being available for Alpine but doesn't it provide authentication via pam_sss ?
by dizhn 7mo ago
I haven't used SSSD due it not being available for Alpine but doesn't it provide authentication via pam_sss ?
- gnufx 7mo agoYes, but its authN components only act locally, and PAM is optional for sshd. It can/does call out to network services like Kerberos/LDAP given a password, of course, but I was thinking of network authN connected directly with OIDC somehow, for which I don't know a mechanism in vanilla OpenSSH. (I don't know what Authentik does for this -- I could imagine it's behind the scenes somehow.) I should probably look it up sometime.
- dizhn 7mo agoMy understanding is since it's an agent running on the target, possibilities will be quite extensive. But it is relatively new and there is no stable release of it yet. https://docs.goauthentik.io/endpoint-devices/authentik-agent/ https://docs.goauthentik.io/endpoint-devices/authentik-agent...