So far, I have been able to research on what it is:

  1. authentication;
  2. authorization;

using resource authd.

I still have not come across a definitive answer or source which explains:

  1. Why do we use authd?
  2. When to use it?
  3. How does authd work?

Can anybody help me answer these questions?

  • $\begingroup$ Never heard of it but it looks old and only supports RSA? At a quick glance, looks like the server challenges the client and the client signs it using their RSA key and the server verifies it. Alternatively the server RSA encrypts a challenge and the client must reveal it, or a representation of it I.e. a hash. $\endgroup$ – cypherfox Mar 27 '18 at 2:30
  • $\begingroup$ @cypherfox That's not what I read. The client simply receives a signed, time limited token from the server. There is only one RSA key pair: the one of the server. But it is probably an understatement to say that the protocol lacks a good online specification. $\endgroup$ – Maarten Bodewes Mar 27 '18 at 9:48
  • $\begingroup$ @MaartenBodewes Ah looked at it from an ssh-client perspective. Agree with the lacking documentation. $\endgroup$ – cypherfox Mar 27 '18 at 10:24
  • $\begingroup$ It seems that there aren't many people here that know about the protocol. I suggest to try a *nix QA site as well. $\endgroup$ – Maarten Bodewes Mar 30 '18 at 11:26

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.