[openstack-dev] [tatu] Integration with Uber's pam-ussh module (and Stripe's KRL)

Pino de Candia giuseppe.decandia at gmail.com
Sat Mar 3 18:38:07 UTC 2018

Hi Folks,

I integrated Uber's pam-ussh module in Tatu.

With this, if the user's SSH certificate is revoked while they're logged
into the VM, they lose sudo access (btw, I don't know how to close their
session, which would be even better).

Here's the demo video:


Here's my pull request to add KRL support (from
https://github.com/stripe/krl) to pam-ussh:

And here's the Tatu code-review: https://review.openstack.org/#/c/549389/


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20180303/d80a6f96/attachment.html>

More information about the OpenStack-dev mailing list