pam_ssh_agent_auth

pam_ssh_agent_auth copied to clipboard

Support FIDO/U2F ecdsa-sk and ed25519-sk ssh keys

10

Support for the [new ecdsa-sk and ed25519-sk key types](https://www.openssh.com/txt/release-8.2) would be awesome.

srstsavage

On Darwin 22.6.0 (macOS 13.6.1), Apple clang 15.0.0, running `configure -C --without-openssl-header-check`; make` (and with appropriate CFLAG workaround for issue 45) on git HEAD gets: ``` gcc -g -O2 -fPIC...

Artoria2e5

Configure blows up because of implicit declaration of exit()

4

Current git HEAD gives: ``` configure:9081: checking compiler and flags for sanity configure:9095: gcc -o conftest -g -O2 -fPIC -Wall -Wpointer-arith -Wuninitialized -fstack-protector-all -fno-common -I/usr/local/opt/icu4c/include -I/usr/local/opt/ruby/include -I/usr/local/opt/sqlite/include -I/usr/local/opt/gettext/include -I/usr/local/opt/qt/include -L/usr/local/opt/icu4c/lib...

Artoria2e5

Hi :-) i wanted to use the "new" OpenSSH Feature destinatin_constraint to limit which keys are being tried in an ssh session with "sudo" in my ansible playbook. Sadly the...

hasechris

This commit replaces `seteuid(0)` by `seteuid(prev_uid)`, which make this module can be runned by non-root user.

wrvsrx

Fix function prototypes in configure

1

This fixes building with Clang 16. Bug: https://bugs.gentoo.org/870721 Signed-off-by: Sam James

thesamesam

Authentication refused: bad ownership or modes for file

2

re https://dan.langille.org/2014/09/03/when-ssh-and-ansible-play-poorly-together/ Jamie: Did you ever get the new key formats and certificate-based-auth working? You said you had the code in your head.

dlangille

using it without modifying /etc/sudoers

3

It is hinted at several places in the repository that it's not needed to modify `/etc/sudoers` to use this module, for example here: https://github.com/jbeverly/pam_ssh_agent_auth/blob/88c79a04a37d465b793fb7c0e320c30c4e1944d4/pam_ssh_agent_auth.sudoers.conf#L31 I am guessing that, to keep...

bricewge

Building with `LD` defined as `ld.lld` fails with errors such as `ld.lld: error: unknown argument '-Wl,-O1'` (see https://bugs.gentoo.org/741927). This is because if LD is defined in the environment, it becomes...

Peter-Levine

add argument: default_ssh_auth_sock and some fixes

1

Useful when `SSH_AUTH_SOCK` can't be set in environment. For example: loging in from a Display Manager (such as SDDM).

edward-p