Re: Logging into SSH

From: Jeff P. Van Dyke (jpv_at_vandyke.com)
Date: 02/27/04

  • Next message: Dave Howe: "Re: Logging into SSH" 
    To: "Email List: Secure Shell" <secureshell@securityfocus.com>
Date: Thu, 26 Feb 2004 18:51:29 -0700

    > Richard Watson wrote:
    > > Hi,
    > > Does anybody know how to force SSH to require username/password AND
    > > public key authentication before allowing a login?
    > why would you want to? I suppose it would be possible, but only by
    > recompiling.
    > the public key should be password protected anyhow...

    One reason to do this is because it is possible to enforce the
    quality of passwords, but you can't enforce the policy of a
    passphrase on public keys.

    VShell supports this under UNIX with the configuration parameter
    AuthenticationsRequired. You can include both password and
    publickey in the list.

    I believe other SSH2 servers have a similar parameter.

    Jeff P. Van Dyke
    jpv@vandyke.com
    www.vandyke.com

  • Next message: Dave Howe: "Re: Logging into SSH"

    Relevant Pages

    • Re: public key vs passwd authentication?
      ... > I have a client that's turned off public key authentication. ... > examination of the security aspect, it'd make my job a lot easier/ ... http://www.garlic.com/~lynn/aadsm15.htm#2 Is cryptography where security took the wrong branch? ...
      (comp.security.ssh)
    • Putty to Windows sshd server authentication problem
      ... I am having difficulty with public key authentication between a Putty client on one host and a SSH-Textia Windows server on another host. ... 1488:Ssh2AuthPubKeyServer: Received public key not authorized by authorization file. ...
      (SSH)
    • OpenSSH_3.1p1 auth problems
      ... like to have public key authentication working. ... like to logon to Host-B FROM Host-A using public key auth. ... when I ssh on Host-A ...
      (comp.os.linux.security)
    • OpenSSH_3.1p1 auth problems
      ... like to have public key authentication working. ... like to logon to Host-B FROM Host-A using public key auth. ... when I ssh on Host-A ...
      (comp.security.ssh)
    • Re: sftp upload to Windows 2003 EFS directory fails (using public key authentication)
      ... Windows user accounts, doesn't call LSA for authentication and therefore ... cannot access the user key store to get EFS key. ... access to the EFS-encrypted directory - that might work with public key ... > When I upload a file (via sftp client with public key authentication) ...
      (microsoft.public.windows.server.security)