Re: SSH pubkey or password based on user group

Nico wrote:
On 28 Oct, 01:07, "Richard E. Silverman" <r...@xxxxxxxx> wrote:
[sshd_config]

match group root
passwordauthentication no

thanx ;-)


Ahh. That keeps you out of mucking with the PAM configuration files,
which is a bit dangerous to do in systems where software may be
upgraded or configuration tools may edit them in ways that would
require resetting them manually, which could be awkards if your SSH is
messed up.

well, the only occasion in which something could be messed up is if
pam_listfiles.so becomes deprecated. you are right, as long as openssh
provides the functionality we want, we should use it.
The thing is, we 're not going to upgrade to a version that supports
that for a while (we're in 4.3), so we'll have to stick to this ugly
solution with pam.


I think Richard is the winner, and still champeen!

indeed he is ;-)

thanx again for your help guys!

--
Anastassios Nanos
<ananos@xxxxxxxxxxx>

1024D/CCCE759D 2007/04/29 Anastassios Nanos <ananos@xxxxxxxxxxx>
Key fingerprint = 60EC 7B9E CD11 9AB2 C3CE B694 08D6 F033 CCCE 759D
.