We have a need for using different authentication source depending upon which nodes a user connects to via SSH relay. Currently we are using eDirectory as a source for authenticating users but we have servers in different environments and users need to be able to use the credential other than the eDirectory credential.

So I am asking if we can have something like this.

ssh -p 2222 userID@somedomain targetuser@targetserver

Can we get the ability to append a domain name after userID which will then look for authenticating user against that domain? Right now we are deploying multiple instance of PAM because we cannot use different authentication sources.

Comments