identity

func NewIntegratedIdentityService ¶

func NewIntegratedIdentityService(hostkey string, port int, meta metadata.MetaStore)

NewIntegratedIdentityService starts a service on the designated port that will return a user credential when a user connects on the designated port. The client should connect with the ssh user id set to the desired access manager identity. To be allowed to connect, the user's claimed identity must have an `ssh-pubkey` annotation with a public key in the form used in the `authorized_keys` used by ssh. The hostkey is the name of a file that contains an ssh private key. This is used by ssh as the host key for the ssh connection so that clients can populate their `known_hosts` file.