Kb67g6DxX2
I'm using PAM plugin to authenticate clients. Clients should provide valid username/password combination to establish a successful connection, but client certificate is not required.
Now I want to sign some client certificates so that if a valid client certificate is provided, username/password is not required.
In a word, I want to authenticate clients with username/password OR certificate. But seems --auth-user-pass-optional only works with --auth-user-pass-verify.
Any suggestions?
