Add Comment

You are not currently logged in. If you do not have a user account then please consider creating one and logging in before you post your comment. This will allow you to track replies to your comment, and take part in the site much more freely.

To add your comment, fill in all the boxes below and then preview it to make sure you're happy with the way that it looks.

This is the comment you were replying to, attached to the article pam_mount and sshfs with password authentication:


Re: pam_mount and sshfs with password authentication
Posted by allan (74.94.xx.xx) on Wed 26 Mar 2008 at 20:28
Nice article. I authenticate against my private key (login, and ssh are configured in similar fashion) which then caches my credentials in ssh-agent for later use:

common-auth:
auth required pam_ssh.so keyfiles=id_dsa

gdm:
auth requisite pam_nologin.so
auth required pam_env.so readenv=1
auth required pam_env.so readenv=1 envfile=/etc/default/locale
@include common-auth
@include common-account
session required pam_limits.so
@include common-session
@include pam-ssh-sessiont
@include common-password
session optional pam_script.so user=allan

I was not able to get the mount stuff working reliably on etch, so I ended up using pam_script instead:

pam_script_ses_close:
if [ "$PAM_USER" != "${1#user=}" ]
then
exit 0
fi
fusermount -q -u /home/$PAM_USER/media


/Allan

Username:Anonymous
Title:
Your Comment:

Posting Format:

 

Inappropriate comments will be removed.

Some help on entry formatting is available

User Login

Username:

Password:

[ Advanced Login ]

Register Account

Quick Site Search