Dustin C. Hatch 091d9e1f78
r/sudo: Optionally enable pam_ssh_agent_auth ...
The [pam_ssh_agent_auth][0] PAM module authenticates users using keys in
their SSH agent. Using SSH agent forwarding, it can even authenticate
users with keys on a remote system. By adding it to the PAM stack for
`sudo`, we can configure the latter to authenticate users without
requiring a password. For servers especially, this is significantly
more secure than configuring `sudo` not to require a password, while
still being almost as convenient.
For this to work, users need to enable SSH agent forwarding on their
clients, and their public keys have to be listed in the
`/etc/security/sudo.authorized_keys` file. Additionally, although the
documentation suggests otherwise, the `SSH_AUTH_SOCK` environment
variable has to be added to the `env_keep` list in *sudoers(5)*.
[0]: https://github.com/jbeverly/pam_ssh_agent_auth
2024-01-28 12:16:35 -06:00
2022-08-10 22:18:53 -05:00
2018-04-08 12:33:54 -05:00
2021-07-24 18:39:45 -05:00
2018-08-19 14:17:48 -05:00
2022-12-23 08:44:30 -06:00
2022-08-22 20:06:02 -05:00
2022-08-10 22:18:53 -05:00
2023-05-23 09:52:50 -05:00
2020-01-25 13:54:42 -06:00
2020-12-26 10:38:17 -06:00
2019-09-19 19:50:35 -05:00
2022-08-10 21:55:54 -05:00
2021-10-31 14:26:26 -05:00
2022-08-10 19:47:12 -05:00
2022-07-21 13:14:25 -05:00
2022-12-19 10:17:57 -06:00
2018-08-08 21:38:56 -05:00
2018-07-15 12:16:43 -05:00
2018-10-07 21:42:18 -05:00
2020-03-09 20:29:52 -05:00
2022-12-23 06:52:28 -06:00
2018-07-29 10:14:00 -05:00
2020-07-04 14:32:22 -05:00
2023-11-07 21:24:40 -06:00
2018-07-23 17:35:10 -05:00
2019-03-22 09:29:56 -05:00
2019-09-19 19:27:12 -05:00
2019-10-28 18:33:37 -05:00
2018-08-01 22:04:07 -05:00
2022-02-27 17:42:15 -06:00
2021-10-17 14:03:52 -05:00
2022-08-22 20:08:09 -05:00
2023-11-13 17:45:21 -06:00
2022-08-11 21:40:19 -05:00
2021-01-31 15:33:42 -06:00
2020-03-03 19:27:19 -06:00
2022-08-21 08:03:00 -05:00
2020-07-14 11:38:30 -05:00
2023-06-08 10:05:36 -05:00
2018-04-08 10:11:43 -05:00
2024-01-22 20:37:21 -06:00
2019-09-19 19:50:35 -05:00
2023-05-17 14:51:21 -05:00
2018-01-29 15:05:51 -06:00
2018-08-12 10:14:25 -05:00
2018-08-12 10:05:56 -05:00
2018-08-12 09:58:56 -05:00
2018-08-12 09:33:08 -05:00
2018-08-12 10:08:01 -05:00
2018-08-12 10:04:23 -05:00
2020-12-08 20:59:40 -06:00
2024-01-21 15:53:33 -06:00
2019-10-28 18:34:45 -05:00
2022-05-29 11:25:25 -05:00
2020-10-03 11:29:39 -05:00
2022-08-20 18:18:38 -05:00
2022-08-15 16:55:36 -05:00
2020-05-25 09:17:24 -05:00
2022-08-15 17:18:48 -05:00
2021-12-22 11:28:52 -06:00
2018-03-27 20:44:43 -05:00
2022-08-10 21:55:54 -05:00
2018-03-11 18:16:17 -05:00
2018-04-22 11:19:22 -05:00
2024-01-22 09:03:15 -06:00
2024-01-22 09:03:15 -06:00
2024-01-22 09:03:15 -06:00
2023-10-24 17:27:21 -05:00
2020-07-14 10:56:01 -05:00
2022-08-20 18:18:21 -05:00
2022-08-15 17:12:35 -05:00
2019-03-07 13:29:29 -06:00
2018-04-06 20:16:02 -05:00
2021-06-25 11:10:10 -05:00
2023-11-07 20:51:10 -06:00
2018-03-27 20:44:43 -05:00
2018-06-23 14:42:45 -05:00
2023-10-28 09:56:44 -05:00
2023-09-27 20:24:47 -05:00
2021-10-16 14:34:51 -05:00
2024-01-27 20:28:06 -06:00
2023-11-07 21:27:02 -06:00
2023-10-28 16:07:39 -05:00
2018-06-06 21:44:28 -05:00
2020-07-04 14:32:22 -05:00
2021-02-17 20:33:41 -06:00
2024-01-28 12:16:35 -06:00
2024-01-21 19:05:00 -06:00
2023-10-21 22:16:28 -05:00
2021-10-31 14:29:30 -05:00
2022-08-12 14:35:14 -05:00
2019-03-22 09:29:56 -05:00
2022-08-15 17:06:20 -05:00
2018-06-04 20:03:55 -05:00
2024-01-21 16:12:29 -06:00
2022-08-10 19:47:12 -05:00
2022-08-12 13:14:05 -05:00
2023-05-22 21:21:08 -05:00
2022-08-12 13:10:36 -05:00
2024-01-21 15:53:44 -06:00
2024-01-23 22:04:29 -06:00
2019-03-22 10:19:27 -05:00
2023-10-27 17:37:49 -05:00
2019-03-22 09:29:56 -05:00
2018-06-09 14:35:22 -05:00
2021-07-05 09:34:25 -05:00
2022-08-21 22:25:12 -05:00
2022-08-21 22:25:12 -05:00
Dustin C. Hatch
091d9e1f78