Re: [PLUG] ssh question

["Kevin D. McAllister" <kevin@mcallister.ws>]

* Fri, Nov 22, 2002 at 10:47:37AM -0500, epike@isinet.com wrote:
> however I'm still puzzled for how to make the sshd
> server prompt for specific users and not even prompt
> for another group of users and force that group to use
> public key authentication--the control should be
> on the server side.  My objective is to create
> a remote@host account with no valid password
> but reachable only by public key, where the server
> doesnt even prompt for password if thats possible.
> but for that user only.

The server may still prompt for a password but if you lock the
password they can never authenticate.  'passwd -l <username>'

I believe they should still be able to access the account via the
public key authentication.

> 
> i even tried using /sbin/nologin as shell for
> remote@host and that doesnt work either (account
> couldnt launch in need of a shell).
> 
> i'm now testing with AllowUsers
> and DenyUsers and can't seem to make it work the
> way i want to..
> 
> thanks..i'm continuing my reading/research and will post
> back if i find something interesting.
> 
> e pike
> 

-- 
Kevin D. McAllister
kevin@mcallister.ws
_________________________________________________________________________
Philadelphia Linux Users Group        --       http://www.phillylinux.org
Announcements - http://lists.netisland.net/mailman/listinfo/plug-announce
General Discussion  --   http://lists.netisland.net/mailman/listinfo/plug