Passwordless Auth: a JSON-Based Approach for modern authentication w/ SSSD & GNOME
summary
A JSON-based PAM conversation is implemented so SSSD sends a structured list of available mechanisms and GDM replies with the selected mechanism plus credentials; demos show passkeys, smart cards, and external IdP flows, Kerberos ticket issuance on success, a Rust PAM client that serializes/deserializes the messages, and the PAM binary prompt header as an 88‑byte structure with a big‑endian length field. The design is in development with a sssd.io PR and GNOME mockups for SSSD↔GDM integration and a small Rust PAM client.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:50Passwordless authentication
- 3:38GUI auth problems
- 5:02JSON solution design
- 8:19Rust PAM client detour
- 10:07Live auth demo
- 12:59GNOME mockups showcase
- 17:20Conclusion
- 19:31Q&A
related talks
47mPasswordless in PAM: Myth or Reality?
26mWho Authenticates Linux? Rethinking PAM & NSS in the Age of Cloud Identity
55mYou Shall Not Password: Modern Authentication for Web Apps
40mNOPASSWD: Building a Passwordless Cloud Infrastructure
50mNOPASSWD: Building a Passwordless Cloud Infrastructure
51mYou Shall Not Password: Modern Authentication for Web Apps
39mPasswords are so 1990 - Sam Bellen - PHP UK 2022
50msshlogin: securely authenticating to remote Linux systems via ...