3 ms·
So, half-baked ideas are the topic, right? Turn the idea on its head: Find a way to use SSH based authentication for services and allow people to connect with
by darklajid 14y ago
So, half-baked ideas are the topic, right?
Turn the idea on its head: Find a way to use SSH based authentication for services and allow people to connect with their GitHub account, find a clever way to map AuthorizedKeysFile (via fuse or something) to https://github.com/%u.key https://github.com/%u.key (yeah, won't directly work that way of course).
- philsnow 14y agoI think you could hack this up in an afternoon with PAM, but is PAM even distributed with modern Linux distributions? I thought I read somewhere that its un-loved and doomed.
- mcpherrinm 14y agoPAM is indeed still how authentication on Linux works.
- Nick_C 14y agoSome Linuxes. Slackware doesn't use it. I think Debian Stable still does. AKAICT, most people hate it.
- philsnow 14y agoDistro, do you even PAM ?
- mcpherrinm 14y agoYou're right. Slackware doesn't. They're notable for that, and I don't think any other mainstream distribution (if Slackware even counts as that) excludes it. At least in the multi-user environments I manage, PAM works well, and we maintain some custom PAM modules to do things like handle unpaid accounts with warnings then lockout. It's a little complex but I don't know of any viable alternative -- setting up Kerberos on Slackware is a big pain last I checked. Maybe not relevant to single user machines, but that's not the context we're talking about here.