Re: Mixing Public Key and Password authentication

From: Darren Tucker (dtucker_at_gate.dodgy.net.au)
Date: 10/26/05


Date: 26 Oct 2005 10:24:20 GMT

On 2005-10-26, Eric B. <ebenze@hotmail.com> wrote:
> Ideally, what I would like to do is only provide shell access to users
> who authenticate via Public Key. Password authentication only would
> provide access to SFTP.
>
> Is something like that possible with OpenSSH? I've read through
> documentation, but can't seem to find anything that covers that kind of
> situation.

Not without some modification; OpenSSH doesn't provide that level of
granularity.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


Relevant Pages

  • Interesting problem with OpenSSH v3.9p1, MIT Kerberos authenticating against Active Directory
    ... I seem to have run into a road block getting my Linux machines to ... authenticate against AD when coming in through OpenSSH. ... place using Kerberos, then I get the following error from the ssh daemon: ...
    (comp.security.ssh)
  • Re: authentication failure when logging in with public key
    ... The pam module doesn't like that and considers ... The user then continues trying to authenticate ... to OpenBSD's sshd but so far no one has said anything about it). ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • OpenSSH v3.9p1 and Kerberos5 against Ad
    ... What is strange is that when I log onto the ... Linux box and then use the kinit program, I can authenticate just fine ... I am using MIT Kebreros v1.4 and OpenSSH V3.9p1 ...
    (SSH)
  • OpenSSH and nsswitch
    ... The system is running Debian 2.2 and I have a Debian-packaged version ... of OpenSSH 1.2.3 that properly uses the module and lets me login. ... pass the username to the module, ... seems to ignore the module and authenticate the usual way. ...
    (comp.security.ssh)
  • Re: secure port forwarding without shell access
    ... > shell access at all, but they can still forward ports. ... I am using putty to authenticate and both of these drop connection immediately. ...
    (comp.security.ssh)