unlocking ssh-agent keys via pam

[vovan69]

As I understood it's possible to unlock ssh-keys automatically using pam auth with pam_envoy. However this useful feature doesn't work (at least) for me. I'd appreciate any ideas regarding debugging this issue.

envoy v8-12-g8a2881f

[vodik]

Are you using gpg-agent or ssh-agent?

[vovan69]

I'm using only ssh-agent:

• systemd: @[email protected]
• pam: auth optional /usr/lib/security/pam_envoy.so
• pam: session optional /usr/lib/security/pam_envoy.so ssh-agent

[vodik]

Yeah that's not implemented and I don't know if I ever will unless someone write the code for me 😉. Its only implemented for gpg-agent because I use gpg-agent and was relatively straightforward.

It might be possible to take the existing pam_ssh.so and tack on envoy to use to fetch the agent's socket.