support for AuthorizedKeysCommand
Brought to you by:
soupboy
CentOS created an add-on for getting the users' authorized keys via an external wrapper script. It's been submitted back to OpenSSH as a patch, and has been adopted by various OS packagers. This permits users' keys to be centrally stored, on an LDAP server. If pam_ssh_agent_auth had the ability to use the same external script, it would remove passwords from system management.
You can get the details of the wrapper at https://bugzilla.mindrot.org/show_bug.cgi?id=1663
And thank you for an awesome tool, it makes my life easier in all sorts of unexpected ways!
working on it.