epike on Fri, 22 Nov 2002 11:00:11 -0500 |
however I'm still puzzled for how to make the sshd server prompt for specific users and not even prompt for another group of users and force that group to use public key authentication--the control should be on the server side. My objective is to create a remote@host account with no valid password but reachable only by public key, where the server doesnt even prompt for password if thats possible. but for that user only. i even tried using /sbin/nologin as shell for remote@host and that doesnt work either (account couldnt launch in need of a shell). i'm now testing with AllowUsers and DenyUsers and can't seem to make it work the way i want to.. thanks..i'm continuing my reading/research and will post back if i find something interesting. e pike > > On Thu, Nov 21, 2002 at 06:11:35PM -0500, epike@isinet.com wrote: > > how do i disable ssh password authentication and force > > users to use public key authentication (default = if no > > public key, prompt for password). > > man ssh > > which suggests looking at > > man ssh_config > > which reveals, searching for the word "password": > > PasswordAuthentication > Specifies whether to use password authentication. The > argument > to this keyword must be ``yes'' or ``no''. The default is > ``yes''. > > (I haven't tried this myself today (you want me to do all your work?), > but it concurs with my recall of how to do it.) > > -- > Jeff > > Jeff Abrahamson <http://www.purple.com/jeff/> > GPG fingerprint: 1A1A BA95 D082 A558 A276 63C6 16BF 8C4C 0D1D AE4B > _________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.netisland.net/mailman/listinfo/plug-announce General Discussion -- http://lists.netisland.net/mailman/listinfo/plug
|
|