i haven't been following this thread very closely, but i do remember someone mentioning using a java ssh client. this seems to be a good way to use authpf:
- have a webpage that has the java ssh client on it and instructions to ssh to some.host to gain access, in case ppl don't want to use the java client for sshing - once the user has authenticated, the authpf ruleset gets loaded and all works as desired this way there is a web interface for dummies, instructions for smart ppl and it uses the existing authpf facilities without hacking out something that is possibly insecure. cheers, jake