Re: Make sudo -S work with ssh -T

> On Jun 24, 2022, at 11:42 AM, Grant Taylor via sudo-users <[email protected]> wrote:
> 
> Have you considered authenticating to sudo via SSH agent forwarding?

No, I didn’t. Thanks for the heads up.

However, I’m not sure I follow. If I’m not wrong, SSH agent forwarding is for logging into remote server B from remote server A without A having the credentials itself. How could that apply to sudo? Do you mean using a pam module like pam_ssh_agent_auth to authenticate the sudo user passwordlessly? I’m not familiar with this approach, but it seems to rely on ssh-agent running locally and reading a local authorized_keys file. I’m not sure if forwarding is relevant here?

I guess I probably have misunderstood. Could you share some tips on how that could be done?

Regards,
Glen
____________________________________________________________
sudo-users mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-users