say again? why is the private key on a remote?

Reply to this note

Please Login to reply.

Discussion

Sorry I was talking from the server's perspective, accepting connections from remote clients.

Still not sure if I understand the flow.

It's probably easiest to write a pam plugin.

That's my plan actually. The plugin hooks into the password flow, sends a challenge token and, expects the signed message back, and authorizes the connection. A talk with AI gave me the configuration code and steps, I just need to do it on a VM and see if it works.