epike on Fri, 22 Nov 2002 11:00:11 -0500


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] ssh question


however I'm still puzzled for how to make the sshd
server prompt for specific users and not even prompt
for another group of users and force that group to use
public key authentication--the control should be
on the server side.  My objective is to create
a remote@host account with no valid password
but reachable only by public key, where the server
doesnt even prompt for password if thats possible.
but for that user only.

i even tried using /sbin/nologin as shell for
remote@host and that doesnt work either (account
couldnt launch in need of a shell).

i'm now testing with AllowUsers
and DenyUsers and can't seem to make it work the
way i want to..

thanks..i'm continuing my reading/research and will post
back if i find something interesting.

e pike

> 
> On Thu, Nov 21, 2002 at 06:11:35PM -0500, epike@isinet.com wrote:
> > how do i disable ssh password authentication and force
> > users to use public key authentication (default = if no
> > public key, prompt for password).
> 
>     man ssh
> 
> which suggests looking at
> 
>     man ssh_config
> 
> which reveals, searching for the word "password":
> 
>      PasswordAuthentication
>              Specifies whether to use password authentication.  The
> argument
>              to this keyword must be ``yes'' or ``no''.  The default is
>              ``yes''.
> 
> (I haven't tried this myself today (you want me to do all your work?),
> but it concurs with my recall of how to do it.)
> 
> -- 
>  Jeff
> 
>  Jeff Abrahamson  <http://www.purple.com/jeff/>
>  GPG fingerprint: 1A1A BA95 D082 A558 A276  63C6 16BF 8C4C 0D1D AE4B
> 

_________________________________________________________________________
Philadelphia Linux Users Group        --       http://www.phillylinux.org
Announcements - http://lists.netisland.net/mailman/listinfo/plug-announce
General Discussion  --   http://lists.netisland.net/mailman/listinfo/plug