Re: Signed Email PAM authentication

From	Celejar <celejar@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: Signed Email PAM authentication
Date	2021-05-14 17:20 +0200
Message-ID	<CeHLz-1wF-3@gated-at.bofh.it> (permalink)
References	<CeH8S-14A-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Fri, 14 May 2021 16:29:32 +0200
Marek Mosiewicz <marek.mosiewicz@jotel.com.pl> wrote:

> Hello,
> 
> I think of idea of having additional PAM module which passes login
> after receiving and validating signed email (for some scenarios it
> could even requires emails from many persons). Signing emails can be
> done easliy in secure way and it could be also good for auditing.

About 10-15 years ago, largely as a coding exercise / proof of concept,
I wrote "mailmin", a Perl program that allows access to a remote system
via signed / encrypted email. I am not a security expert or even
a very skilled hobbyist, so it's strictly amateur-hour stuff, and
undoubtedly horribly insecure, and in any event, it doesn't use the PAM
framework, so I doubt it'll be of much use to you, but it was a
somewhat similar idea ...

https://sourceforge.net/projects/mailmin/

Celejar

Thread

Signed Email PAM authentication Marek Mosiewicz <marek.mosiewicz@jotel.com.pl> - 2021-05-14 16:40 +0200
  Re: Signed Email PAM authentication Darac Marjal <mailinglist@darac.org.uk> - 2021-05-14 17:10 +0200
    Re: Signed Email PAM authentication Marek Mosiewicz <marek.mosiewicz@jotel.com.pl> - 2021-05-14 19:50 +0200
  Re: Signed Email PAM authentication Celejar <celejar@gmail.com> - 2021-05-14 17:20 +0200
  Re: Signed Email PAM authentication David Wright <deblis@lionunicorn.co.uk> - 2021-05-14 18:00 +0200
    Re: Signed Email PAM authentication Marek Mosiewicz <marek.mosiewicz@jotel.com.pl> - 2021-05-14 19:30 +0200

csiph-web