vyos-1x.git/data/templates/login/authorized_principals.j2, branch feature/T9082-codeql-cpp VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp 2025-05-29T11:57:48+00:00 ssh: T6013: move principal name to "system login user <name> authentication" 2025-05-29T11:57:48+00:00 Christian Breunig christian@breunig.cc 2025-05-20T17:49:39+00:00 urn:sha1:81dfb64ebb3ea3c58c92e8f26e8610a46e4c50d2 We already support using per-user SSH public keys for system authentication. Instead of introducing a new CLI path to configure per-user principal names, we should continue using the existing CLI location and store the principal names alongside the corresponding SSH public keys. set system login user <name> principal <principal> The certificate used for SSH authentication contains an embedded principal name, which is defined under this CLI node. Only users with matching principal names are permitted to log in.