I have to create a webapp (Apache/PHP) which act as a webportal for people who need to connect via SSH on severals servers. One just go to the portal, authentify himself, and ask to open SSH access. From now, he can connect with his favorite SSH client, and can stop the session on the webapp. All servers are Debian Lenny or Squeeze, and we already connect to them throught a SSH proxy. On this proxy, there is a file /etc/ssh/sshd_config
AllowUsers email@example.com.* firstname.lastname@example.org.* AllowUsers email@example.com.*
How can I allow or disallow a user from my webapp? An easier way than rewriting this file and restarting opensshd?