cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
652
Views
0
Helpful
1
Replies

SSH and AAA

pamirian76
Level 1
Level 1

hi,

this is my story,

I'm working on an architecture and I have a question,

I will have a pix515E, the client comes on the pix from the internet, gets an AAA login/pass prompt to access the web site.

if the user/pass is ok, the users gets in.

from the site the client downloads a java applet.

from his own computer the client now uses the applet to ssh on another server going again through my pix 515E.

how do I use AAA on SSH?

because AAA works with ftp, telnet and http

--------------

at first, can I do a virtual http x.x.x.x on my pix

the client connects to x.x.x.x using the browser

types in the aaa user/pass

and then he can do ssh from his pc using the java applet without having to provide any login/pass again?

----------------

because what I really want to do is get a user/pass only once and if it's good from there he can go on the web site or/and do ssh using the applet.

thanks.

1 Reply 1

Richard Burts
Hall of Fame
Hall of Fame

What you are asking for is a single-signon capability. I do not believe that either the PIX or aaa have support for that at this time.

HTH

Rick

HTH

Rick