I have a single CentOS server, and several Windows clients that should connect to it, from remote. I've successfully setup OpenVPN (with Public Keys), with which the clients connect to the server; and then they use SSH to do the actual work. Everything is working fine in this configuration.
However, there is some redundancy here - after the user authenticated with the OpenVPN key, he must manually login to the SSH and supply the password.
Is it possible, that the SSH server will 'understand' that the user has already authenticated?
I have tried to go in the lead of setting LDAP server, use it for the Unix accounts managements, and then use it for OpenVPN authentication - but it was too complicated, and I'm not sure that it's worth the effort for such a small configuration.