Can you have known_hosts and authorized_keys shell out to a command

Question

Can you make ssh and sshd, instead of checking the ~/.ssh/known_hosts and ~/.ssh/authorized_keys (respectively), invoke a command with the requested key as an argument, and accept the key only if the command accepts?

http://serverfault.com/questions/407497/how-do-i-configure-sshd-to-permit-a-single-command-without-giving-full-login-ac — dmourati, Sep 16 '14 at 16:08

score 2 · Answer 1 · answered Sep 16 '14 at 14:44

2

I don't think sshd (running on the server) checks ~/.ssh/known_hosts.

However, see AuthorizedKeysCommand and AuthorizedKeysCommandRunAs configuration options. Some code seems to be here: http://www.sysadmin.org.au/index.php/2012/12/authorizedkeyscommand/

But I haven't tried this myself.

answered Sep 16 '14 at 14:44

Paul Sand

21
1

In case of known_hosts I meant ssh. – user242572 Sep 17 '14 at 08:42

Can you have known_hosts and authorized_keys shell out to a command

1 Answers1