Mixing Public Key and Password authentication

From: Eric B. (ebenze_at_hotmail.com)
Date: 10/26/05

  • Next message: Zhang Weiwu: "ssh hangs after successfull login"
    Date: Tue, 25 Oct 2005 20:48:39 -0400
    
    

    Hi,

    I am looking at installing SSH on a file server to provide SFTP and
    shell access to the server.

    I have noticed that several of the SFTP clients on the market, esp.
    those incorporated into other programs (ie: Macromedia Dreamweaver,
    Contribute, etc), do not provide to option of authenticating via Public Key.

    Ideally, what I would like to do is only provide shell access to users
    who authenticate via Public Key. Password authentication only would
    provide access to SFTP.

    Is something like that possible with OpenSSH? I've read through
    documentation, but can't seem to find anything that covers that kind of
    situation.

    Thanks!

    Eric


  • Next message: Zhang Weiwu: "ssh hangs after successfull login"

    Relevant Pages

    • Re: Want unusual config...
      ... > SFTP in using sftp-server, and have their home directory appear to be the ... > there is no reason for them to need shell access to the server. ... You may need a chroot cage. ... chroot tools built into it, you can easily manage quite a secure little set ...
      (comp.security.ssh)
    • Re: shell access
      ... > how can I set up ftp accounts for certain users so that they can only ... > have ftp access using sftp, ... to copy files off of via scp, without providing shell access, you can use ... Good judgement comes with experience. ...
      (SSH)
    • Want unusual config...
      ... In addition, I'd like *all* users (except root, of course) to be able to ... root of their FTP account. ... In other words, for most users I only want to allow SFTP connections, since ... there is no reason for them to need shell access to the server. ...
      (comp.security.ssh)
    • Re: [9fans] sshserve.c
      ... Sshfs uses ssh to start a file server program (generally called sftp) on the remote server. ... I believe the sftp binary from the openssh port should "just work" if the fuse sshfs port ...
      (comp.os.plan9)
    • RE: shell access
      ... have /bin/nologin entry in /etc/shells ... only have ftp access using sftp, but not shell access? ...
      (SSH)