Experimental Tailscale PAM Module

This is a very very experimental Tailscale PAM module that allows you to SSH using your Tailscale credentials. This is a response to tailscale/tailscale#3006.

DO NOT USE THIS IN PRODUCTION YET

This code is unaudited, not fully tested and is not known to be secure. This is currently a proof of concept and is not made with the intent to be used yet.

Enjoy this preview into the future of auth.

Installation Instructions

1. Install Rust through your favorite method (most of the time you can probably get away with using rustup).
2. On Ubuntu run this command: sudo apt-get install build-essential git libpam0g-dev. On other distributions you will need to figure this out on your own.
3. Install cargo-deb: cargo install cargo-deb..
4. Build the debian package: cargo-deb -p pam_tailscale.
5. Install it on your target host.
6. Enable sshd ChallengeResponseAuthentication with this magic sed command: sed -i 's/^ChallengeResponseAuthentication.*/ChallengeResponseAuthentication yes/' /etc/ssh/sshd_config.
7. Reload your sshd config: systemctl reload sshd.
8. SSH into your new machine!