hashicorp / hashicorp/vault-ssh-helper

[RFE] OpenBSD authentication support

Open
#52 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
447
Forks
56
PR merge metrics
No merged PRs in 30d

Description

Could we see OpenBSD authentication support as `login_vault` ?
See http://man.openbsd.org/login.conf#AUTHENTICATION and probably http://man.openbsd.org/auth_subr.3.

Source to various based OpenBSD `login_*` authentication "modules" (in C) could be found here: https://github.com/openbsd/src/tree/master/libexec.

Although OpenBSD does not support PAM and `sshd` does 'password' authentication itself, it seems that `sshd` could talk to *bsdauth* via setting `AuthenticationMethods keyboard-interactive:bsdauth` options, https://man.openbsd.org/sshd_config#AuthenticationMethods. Not tested by me.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the OpenBSD login.conf and auth_subr documentation, then inspect the OpenBSD libexec login_* sources and the login_vault and sshd AuthenticationMethods references. Determine the integration needed for bsdauth; done means OpenBSD authentication support is implemented and works through the described sshd configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication, operating-systems
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.