Re: Two sshd newbie questions

From: Richard E. Silverman (res_at_qoxp.net)
Date: 02/03/05


Date: 03 Feb 2005 00:27:00 -0500


>>>>> "Chuck" == Chuck <skilover_nospam@softhome.net> writes:

    Chuck> 1) When using RSA authentication, does sshd provide auditing of
    Chuck> who has authenticated themselves as user X? If so, what does it
    Chuck> log? The comment in the key? The remote host name and user that
    Chuck> authenticated?

Presuming you are talking about OpenSSH...

# tail /var/log/auth.log
Feb 3 00:17:48 syrinx sshd[5091]: Accepted publickey for res from ::ffff:216.254.67.191 port 60674 ssh2

Logging the remote username would be meaningless. Who would be supplying
it? The remote user, who could say anything at all. This is only
meaningful for hostbased authentication.

    Chuck> 2) If password authenticated direct logins as user X are
    Chuck> disabled, can I still login from a remote machine using ssh?

Depends on how those logins are "disabled."

-- 
  Richard Silverman
  res@qoxp.net


Relevant Pages

  • Re: IE7 and Companyweb Authentication
    ... take an in-depth look at how my remote users login. ... This was what caused the problem with IE7 ... wants to have users authenticate using Basic Authentication which allows ...
    (microsoft.public.windows.server.sbs)
  • Re: Application pool with domain account & anonymous access disabled
    ... Web server must use the remote user's identity to access network ... authentication protocol so that IIS forces authentication (though the choice ... The issue is called "delegation", ...
    (microsoft.public.inetserver.iis)
  • Re: Getting seteuid/setegid functionality out of Windows
    ... the web client supplies to the web server ... via some password-request via SSL, or, in a pure Windows Authentication ... on a remote machine. ...
    (microsoft.public.win32.programmer.kernel)
  • "Local" and "Remote" considered insufficient
    ... These types of discrepancies in terminology happen fairly often. ... to include the amount of "authentication" required, ... vs. remote terminology for a while. ... When an FTP bug is exploitable by "authenticated" users, ...
    (Bugtraq)
  • "Local" and "Remote" considered insufficient
    ... These types of discrepancies in terminology happen fairly often. ... to include the amount of "authentication" required, ... vs. remote terminology for a while. ... When an FTP bug is exploitable by "authenticated" users, ...
    (Vuln-Dev)