On Wednesday 17 September 2008 14:26:50 Robert Bridge wrote: > > Keys make for better security, but I would like it to be even better. > > I also want to have my facts 100% straight - if I tell my boss "it > > can't be done" I like to show research to back it up. There's nothing > > worse than saying something can't be done, and someone else in the > > room immediately says how it can be done ... :-) > > You could use keys AND passwords for the SSH. It should be trivial to > set PAM up for it...
I had thought of that, but I'm shying away from it - the admin load of supporting that many user passwords is crippling. The users forget their passwords or share them and write them on stciky notes... -- alan dot mckinnon at gmail dot com