Re: [PLUG] Pros and cons of key-pair based vs password based SSH...

[Fred Stluka <fred@bristle.com>]

Thanks for all the great suggestions everyone!  I've followed a
bunch of the links you sent, read the man page for ssh_config
and sshd_config, and made some changes.  I especially like the
idea of limiting which users can login via AllowUsers and/or
AllowGroups.  OpenSSH has a ton of features.  I had no idea about
the possibility of sharing access to the same connection to get
remote filename completion on scp, etc.  Cool!

--Fred
---------------------------------------------------------------------
Fred Stluka -- mailto:fred@bristle.com -- http://bristle.com/~fred/
Bristle Software, Inc -- http://bristle.com -- Glad to be of service!
---------------------------------------------------------------------

Michael Bevilacqua wrote:

On Wed, Jun 10, 2009 at 8:42 PM, Richard Freeman <r-plug@thefreemanclan.net> wrote:

The other thing I do is to modify my pam config for ssh to only allow
particular accounts to log in

Note that, if you have access to /etc/ssh/sshd_config you could simply use this configuration option:

AllowUsers user1 user2 user3

See sshd_config(5) for more details on this option.

--
Michael D. Bevilacqua
michael@bevilacqua.us

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
  

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug