RE: PubKey Auth and no password

From: Turner, Carl H [NTWK SVCS] (CarlTurner_at_NMCC.SprintSpectrum.com)
Date: 08/14/03

  • Next message: Jeff Barrett: "sftp and last modified timestamps" 
    Date: Thu, 14 Aug 2003 14:23:26 -0500
To: "Martin Arpon" <marpon@yahoo.com>, <secureshell@securityfocus.com>

    Don't put a '*' in for the password. This means the account is disabled. OpenSSH checks for this.
    Instead, change the password for that user to something. Does matter what, could even be the username.
    Then edit the passwd (or shadow file) and insert a char. somewhere in the encrypted password string.
    This will make the password unusable, and make OpenSSH feel comfortable about the users account not being locked out.

    -Carl

    -----Original Message-----
    From: Martin Arpon [mailto:marpon@yahoo.com]
    Sent: Thursday, August 14, 2003 9:17 AM
    To: secureshell@securityfocus.com
    Subject: PubKey Auth and no password

    Hi. I configured a user to authenticate via public key
    without entering a password. Works fine. As this is the
    only method I want for that user, i removed his
    password (password = *). But then the user can 't login
    any more with public key (I assume it 's treated as disabled).

    How can I define the user without giving it a password
    to be able to do pubkey auth?

    SO: AIX 5.2 OpenSSH 3.6.1p2

    Any tips appreciated. Regards,

    Martin Arpon

    ps. I 'm not suscribed. If you can, please CC me. Thanks.

    ------------
    Internet GRATIS es Yahoo! Conexión
    4004-1010 desde Buenos Aires. Usuario: yahoo; contraseña: yahoo
    Más ciudades: http://conexion.yahoo.com.ar

  • Next message: Jeff Barrett: "sftp and last modified timestamps"

    Relevant Pages

    • RE: OpenSSH connection Problem
      ... From OpenSSH, to SSH2 ... Note that following the public key from OSSH will be on CSSH. ... If you are not an intended recipient, ...
      (SSH)
    • Re: F-Secure client talking to OpenSSH server
      ... You need to reformat the public key from SECSH format to the OpenSSH format. ... print the key in a `SECSH Public Key File Format' to stdout. ...
      (SSH)
    • Re: SSH - Direct login without password - Beginner Question
      ... > from trojan to atlantis directly without the root password request. ... Under openssh, the file to modify would be sshd_config ... non-root account on the target system to use the public key. ...
      (comp.unix.solaris)
    • RE: Help with OpenSSH -> SSH2 Server
      ... > Well in the past I copied the clients SSH formatted public key up to the ... > server and then ran the conversion on the server. ... > openssh DSA format. ...
      (SSH)
    • Broken DC due to changes regarding privileges (OpenSSH)
      ... I am trying to get OpenSSH working on a Windows Server 2003 with public key ... I am trying to get OpenSSH to work on both. ... create a token object as well as replacing process level tokens. ... create a user account, put him into the administrators group and give him the ...
      (microsoft.public.security)