SSH and AAA

pamirian76 — Sun, 10 Mar 2019 20:54:16 GMT

hi,

this is my story,

I'm working on an architecture and I have a question,

I will have a pix515E, the client comes on the pix from the internet, gets an AAA login/pass prompt to access the web site.

if the user/pass is ok, the users gets in.

from the site the client downloads a java applet.

from his own computer the client now uses the applet to ssh on another server going again through my pix 515E.

how do I use AAA on SSH?

because AAA works with ftp, telnet and http

--------------

at first, can I do a virtual http x.x.x.x on my pix

the client connects to x.x.x.x using the browser

types in the aaa user/pass

and then he can do ssh from his pc using the java applet without having to provide any login/pass again?

----------------

because what I really want to do is get a user/pass only once and if it's good from there he can go on the web site or/and do ssh using the applet.

thanks.

Re: SSH and AAA

Richard Burts — Mon, 29 Nov 2004 21:40:02 GMT

What you are asking for is a single-signon capability. I do not believe that either the PIX or aaa have support for that at this time.

HTH

Rick