LDAP auth via SSH

mogarchy

Hi all,
I'm working on beefing up my security a bit and want to get away from Local Database Auth and have my team log in with individual credentials - I have LDAP working with my ~~G Suite~~ Google Workspace Directory and GUI logins are fine, but no luck with SSH.

I see a couple posts asking about this from a few years back but no seemingly no resolution, any help?

Thanks!

stephenw10

You want to use LDAP over SSH, like via an SSH tunnel?

Or you want to authenticate SSH logins using LDAP?

Steve

jimp

It's not yet possible for SSH users to login via LDAP: https://redmine.pfsense.org/issues/8698

mogarchy

@stephenw10 I want to authenticate SSH logins to PFsense via LDAP.

mogarchy

@jimp Thanks for the info, do you have the power/ability to make it happen? If so what's your price? (not a joke)

Otherwise, can I use any external authentication server like RADIUS or am I stuck with local authentication for SSH sessions?

viktor_g

@mogarchy said in LDAP auth via SSH:

@jimp Thanks for the info, do you have the power/ability to make it happen? If so what's your price? (not a joke)

Otherwise, can I use any external authentication server like RADIUS or am I stuck with local authentication for SSH sessions?

RADIUS shell authentication is implemented in 2.5:
https://redmine.pfsense.org/issues/10545