Getting pam_ssh_agent_auth to work with Ansible

pam_ssh_agent_auth lets you use your ssh keys inside ssh-agent, that you forward in your ssh client connections to subsequently give you passwordless sudo via a destination side list of trusted public keys. This can be used with ansible which often needs root permissions, details below: There is a good (ubuntu specific) guide to setting pam_ssh_agent_auth up …

Continue reading ‘Getting pam_ssh_agent_auth to work with Ansible’ »

idmapd for NFSv4 doesn’t do what you think it does

After wasting a lot of time trying to remap UIDs for an NFS mount using idmapd, I came across this article. In summary: “The problems start when we want to access the file contents or modify a file/directory and suddenly we get ‘permission denied’ type messages. Now NFS itself doesn’t do the security authentication but …

Continue reading ‘idmapd for NFSv4 doesn’t do what you think it does’ »