I’ve stared at SASL, SAML, and PAM but the precipice is too steep.
Closest thing I could think of is to remote SSH into the other three and fire up its X session.
We do this at work, and have everything from Windows desktops, Linux desktops and servers, and almost all our 3rd party applications using the same accounts and passwords.
I was listening at a conference call about security in my area of work and someone said that 100% of the pen-tests done in the past year on various entities got full control of the Active Directory.
At the conference call I mentionned that we do without AD and with pGina, the senior security officer said it was not a bad idea when possible :).
If it's for a home system where you want to be able to log in to everything without an SSH key or password, that sounds like kind of a bad idea.
https://www.evidian.com/products/authentication-manager/logi...