Surviving the SSHpocolypse (opens in new tab)

(github.com)

15 pointsKenan13y ago3 comments

3 comments

3 comments · 2 top-level

akira250113y ago· 1 in thread

Maybe I'm missing something, but why would you patch SSH instead of just using something like pam_mysql and nscd?

kijin13y ago

Previous, but still inconclusive, discussion about the same matter:

https://news.ycombinator.com/item?id=895072

viraptor13y ago

It's not clear from the post if they're still using a custom patch. It looks like the fairly new option AuthorizedKeysCommand could save them some work, since you can plug in an arbitrary external script that way.

j / k navigate · click thread line to collapse