Surviving the SSHpocolypse(github.com)

15 pointsby Kenanvor 14 Jahren3 comments

github.com

Surviving the SSHpocolypse

https://github.com/blog/1212-surviving-the-sshpocolypse

2 comments

akira2501vor 14 Jahren

Maybe I'm missing something, but why would you patch SSH instead of just using something like pam_mysql and nscd?

kijinvor 14 Jahren

Previous, but still inconclusive, discussion about the same matter:

https://news.ycombinator.com/item?id=895072

viraptorvor 14 Jahren

It's not clear from the post if they're still using a custom patch. It looks like the fairly new option AuthorizedKeysCommand could save them some work, since you can plug in an arbitrary external script that way.