ssh and scponly related query.

From: Benjamin Donnachie (benjamin_at_pythagoras.no-ip.org)
Date: 09/14/05

  • Next message: openssh_at_scottc.org: "SSH Windows MSI Available (Automate Config UNIX->Windows)" 
    Date: Wed, 14 Sep 2005 18:47:38 +0100
To: secureshell@securityfocus.com

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    I currently use ssh and scponly to restrict users to file transfers
    only, with authentication currently carried out using passwords.

    However, I was wondering whether it is possible to specify an
    alternative shell depending upon the user and authentication method
    used. For example, if using public key authentication I would like
    certain users (especially me!) to be able to invoke a bash shell -
    however, for all other authentication methods and all other users I
    would like it to default to scponly.

    I've tried adding an entry to the authorized_keys file specifying
    /bin/bash, but this just lead to ssh using scponly as the shell to
    invoke bash - which obviously didn't achieve the desired affect!

    Many thanks,

    Ben
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.1 (Darwin)
    Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

    iQIVAwUBQyhiOOgNmph0Y1E2AQLjyw//YsFvHzUihIb8MHN6TqsYQtJi3wjJ6IwF
    VHySGSiJ+0OxSAO0xzu/x1hQZI5xUfuA1SnY3Q6LRk3Vo0nMwsjI4jCSsl5PNuDO
    Y/hs3+JmRSWjLK6T5U3uovbbQy62C9nX544PWXPwcXGKQfqCkelmYfvav0fTGTHQ
    Y4SBRsvSDiTq95XDI0JRjYtG8T80h9lZ0GlXfil4b3B6qsqTz+LxaMA4eDXV9mbI
    Mc1eFrp2dG6pqPpVuRfpC5Pm9lDvmzPo1n5Lz6re8iwXIs0IdsLMkcEjNdGKdnDG
    s9B5+xgxjTkf2sJ4YiCuH8IL7yWc2PiyodMC538G8ErKoh2ykSrMGeXVvGc4N8ac
    ZuNxM7A7J4sgGel6tF4iLAxg2CeMHrGTBCxPTEttZCdBOl8HNKVVPXvnfKbMEmfM
    De8hpWBZvoNESx8+dUgE/LFfRQy8F2yIEIIrbel2mTYH4YsDsOMfUmE5JIqNaCPn
    nGHF5wt/RhumjGjJxzska9t+NphRwFrvA8c1vQXw9XktFnP9lIeNB1QmTJeczjIT
    1760WWzOt2MtRsBEEX5VeubtIbaJgDxfeRJfKeVuQnVAD73RMorgoOdnodM/oU3R
    BAGU6lobxm7AImG9Y/q8Np2+WLwvUQq9go7LQXT8OQgoLnCcv/7cn5S6ybd1bS6k
    XPmEbtye3cY=
    =2pKq
    -----END PGP SIGNATURE-----

  • Next message: openssh_at_scottc.org: "SSH Windows MSI Available (Automate Config UNIX->Windows)"

    Relevant Pages

    • Re: authenticated, but no prompt
      ... That's why you do not get a shell.. ... until this morning I was able to ssh from my ubuntu client to my fedora ... authentication seems to be ok, ... debug1: Authentication succeeded. ...
      (SSH)
    • Re: Setting up SSH on Snow Leopard
      ... The above indicates that the only two methods of authentication ... I did *not* enable the publickey or ... keyboard-interactive methods in my client. ... being advertised by the SSH server on the Mac client? ...
      (comp.sys.mac.system)
    • Re: authentication problem
      ... I have an authentication issue with ssh that i'd like to ask for clues ... but owner? ... Could you make sure ~/.ssh on both machines is only read/write ...
      (Fedora)
    • Re: Setting up SSH on Snow Leopard
      ... a Terminal window on the Mac and try "ssh localhost". ... authentication methods, and is either of those preferred from a security ... the most secure configuration will offer the least amount ... If you want to harden your SSH server, ...
      (comp.sys.mac.system)
    • Re: Setting up SSH on Snow Leopard
      ... The above indicates that the only two methods of authentication the SSH ... server is allowing are publickey and keyboard-interactive. ... client is trying to use, so presumably that could be a reason it is failing. ...
      (comp.sys.mac.system)