Re: using ssh authentication with sudo
- From: Justin Alcorn <justin@xxxxxxxxxxx>
- Date: Tue, 22 May 2007 20:11:49 -0400
Actually, you're missing the most important piece of sudo.
People walk away from terminal sessions all the time. The point of the
authentication and timeout is to assure that the person executing the
sudo is actually the correct, authenticated person.
That's why sudo won't accept cached credentials. And I wouldn't do
anything to change that behavior. You might as well just log in with
UID 0 then.
Eric S. Johansson sent the following missive on 5/20/2007 11:17 AM:
there is a number of ways I could be missing something obvious so I
apologize in advance.
My idea is should be possible to grant sudo access with your ssh
credentials. the logic is that once the server has granted access to a
client based on its ssh keys, it should be possible to use the same
authentication to grant sudo privileges. After all, if a key pair is
good enough to get you into one machine, why isn't it good enough to
grant you the full Monty?
Assuming that it is, how could a local program determine that the
process it is running in has done so via ssh key authentication. Would
it query the agent directly? Would it be able to use agent forwarding?
Or is this a really bad idea that I should just give up on?
---eric
--
Justin Bradford Alcorn
justin@xxxxxxxxxxx
http://jalcorn.net
PGP Fingerprint A36D D691 C5B0 BE15 5A2A AF49 AA1C 372C
- References:
- using ssh authentication with sudo
- From: Eric S. Johansson
- using ssh authentication with sudo
- Prev by Date: store password (what do you think of this patch/idea?)
- Next by Date: Re: using ssh authentication with sudo
- Previous by thread: using ssh authentication with sudo
- Next by thread: Re: using ssh authentication with sudo
- Index(es):
Relevant Pages
|
