Re: libpam-sshauth spec

On Mon, Jan 04, 2010 at 10:58:42PM -0600, Scott Balneaves wrote:
> As mumbled about today in #ltsp, here's the beginnings of a spec for
> libpam-sshauth:
> 
> https://blueprints.edge.launchpad.net/ltsp/+spec/libpam-sshauth

OK, code work's begun.

So far, I have a somewhat functional pam module.

pam_sm_authentication isn't fully developed, but it DOES:

 * read a config file for the host to contact.
 * open an ssh connection to the host
 * authenticate via the 3 major authentication mechanisms (either
   ChallengeResponse, PublicKey or Password).
 * Return a successful authentication response to pam.
 * Logs via syslog.

With ChallengeResponse enabled in sshd_config, an expired password can be
updated with *no* screen scraping, etc.

All in all, a good weekends work.  Next up will be to finish off some of the
authentication bits that are missing (handling things like try_firstpass,
etc.), then I'll move onto the session handling (establishing the ssh socket,
etc.).

Those interested in following allong as the code develops (and hopefully
contributing) can find the code at:

https://code.edge.launchpad.net/~sbalneav/ltsp/libpam-sshauth

I've been keeping the spec up-to-date.  Feel free to edit that with ideas as
well.

Cheers,
Scott

-- 
Scott L. Balneaves | Words are a wonderful form of communication,
Systems Department | but they will never replace kisses and punches.
Legal Aid Manitoba |     -- Ashleigh Brilliant

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_____________________________________________________________________
Ltsp-developer mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-developer
For additional LTSP help,   try #ltsp channel on irc.freenode.net