Hello;

OK, this may make more than a few of you cringe, but here goes:

I am having difficulties setting up ssh (ossh4.3p2 with PAM-enabled - NIS -Solaris8/Sparc) to authenticate and allow users passwordless entry based solely on one or more of the following:

1. User is a member of an NIS 'group', say group1, and this group has been setup within sshd_config using "AllowGroup group1".

2. User and/or host is a valid member of NIS 'netgroup', whereby the client host has been defined as being a part of netgroup named netgroup1 or the user from 'any' machine as being a part of netgroup netgroup2. In this case I am using "AllowGroup netgroup1 netgroup2".

Aside from creating a public key for each machine/user combination and placing this information within an authorized_keys file, how else can I do this? Using pass-phrases is not an option, I must be able to allow users free access, of course only after already gaining access to one machine in the first place.

All of my machines are within a trusted environment :-)

Many thanks in advance,

.vp


Reply via email to