Re: how to conf sshd to only accept connections from specifc rsa-keys?

From: Greg Norris (haphazard_at_kc.rr.com)
Date: 10/03/03

  • Next message: Mak, Andrew: "RE: 30GB file transfers using scp" 
    Date: Thu, 2 Oct 2003 19:09:10 -0500
To: secureshell@securityfocus.com

    On Thu, Oct 02, 2003 at 03:23:47PM +0200, Markus Flaig wrote:
    > now my boss offered me to use ssh if i can securely restrict the sshd to
    > only allow connections from me.
    >
    > i thought it might be possible to use my rsa-key to do this but i
    > couldn't find out how, or even if this works at all.

    Assuming OpenSSH, I'd use something like the following in sshd_config...

       Protocol 2
       PAMAuthenticationViaKbdInt no
       PubkeyAuthentication yes
       PasswordAuthentication no
       AllowUsers [my_id_here]

    At that point, just populate ~/.ssh/authorized_keys and you should be
    (more or less) good to go.

  • Next message: Mak, Andrew: "RE: 30GB file transfers using scp"

    Relevant Pages

    • sshd (or global) max-connections-per-user setting under FreeBSD ?
      ... I am running a stock FreeBSD 6.0-RELEASE system, ... I am interested in limiting the number of ssh ... connections any particular user can make to the system ... so I don't need it to be sshd ...
      (freebsd-hackers)
    • Re: Thousands of ssh probes
      ... Other than changing ssh to ... day, they originate from several different IP addresses, so I can't ... edit the sshd rule in pf to allow sshd connections. ...
      (freebsd-questions)
    • Re: SSH Slams
      ... I'd like to be able to IP ban these connections ... I'd rather not put ssh ... >>on a nonstandard port since I'd need to specify it on the cli every ... > means is that you stop the sshd entirely and you have another process ...
      (Debian-User)
    • Re: Connection closed by remote host
      ... After server is restarted, everything works fine. ... Then, after 5-6 days, sshd starts to drop incoming connections. ... Sometimes, ssh starts to work, but 10 minutes later, again, ...
      (comp.security.ssh)
    • Re: [Full-disclosure] reduction of brute force login attempts via SSH through iptables --
      ... reduction of brute force login attempts via SSH through iptables --hashlimit ... out why my first attempts at using the hashlimit functionality in iptables ... against legitimate SSH connections, unless someone spoofs a very large ...
      (Full-Disclosure)