Connection info with AuthorizedKeysCommand

Anthony R Fletcher arif at mail.nih.gov
Thu Nov 22 05:33:06 EST 2012


On 21 Nov 2012 at 10:20:22, Daniel Kahn Gillmor wrote:
> On 11/21/2012 09:16 AM, Anthony R Fletcher wrote:
> >  AuthorizedKeysCommandUser
> >    Specifies the user under whose account the AuthorizedKeysCommand is
> >    run. It is recommended to use a dedicated user that has no other
> >    role on the host than running authorized keys commands.
> > 
> > This is a required option when using AuthorizedKeysCommand.
> > 
> > Can we have the option to run as the authenticating user? Otherwise I
> > need to use some kind of sudo magic.
> 
> isn't this what "AuthorizedKeysCommandUser %u" is supposed to do?

Yes, that works. Thanks :-)

Can we add it to the manual page?

		Anthony.


-- 
Anthony R Fletcher        
  Room 2033, Building 12A,        http://dcb.cit.nih.gov/~arif
  National Institutes of Health,  arif at mail.nih.gov
  12A South Drive, Bethesda,      Phone: (+1) 301 402 1741.
  MD 20892-5624, USA.


More information about the openssh-unix-dev mailing list