Displaying 2 results from an estimated 2 matches for "batcha".
Did you mean:
  batch
  
2023 Nov 12
1
Match Principal enhancement
Hi OpenSSH devs,
I?m wondering if the following has any merit and can be done securely ...
If you could match on principals in the sshd_config, then (for example) on a gateway machine, you could have something like
/etc/ssh/authorized_keys/sshfwd:
cert-authority,principals=?batcha-fwd,batchb-fwd? ...
/etc/ssh/sshd_config containing:
Match User sshfwd
    PubkeyAuthentication            yes
    PasswordAuthentication          no
    GatewayPorts                    no
    AllowTcpForwarding              yes
    HostbasedAuthentication         no
    AllowAgentForwarding...
2023 Nov 12
1
Match Principal enhancement
...t; 
> I?m wondering if the following has any merit and can be done securely ...
> 
> If you could match on principals in the sshd_config, then (for example) on a gateway machine, you could have something like
> 
> /etc/ssh/authorized_keys/sshfwd:
> 
> cert-authority,principals=?batcha-fwd,batchb-fwd? ...
> 
> /etc/ssh/sshd_config containing:
> 
> Match User sshfwd
>     PubkeyAuthentication            yes
>     PasswordAuthentication          no
>     GatewayPorts                    no
>     AllowTcpForwarding              yes
>     HostbasedAuthentica...