Re: Disable SSH passwords per user

2010-01-05 Thread Lars Nooden
Ted wrote: > Now I know I can do a Match pattern on User with PasswordAuthentication. You can also Match a group which will be useful if you wish to disable password authentication for more than one user now or to leave the option open in the future. /Lars

Re: Disable SSH passwords per user

2010-01-04 Thread Ted
On Tue, Jan 5, 2010 at 11:35 AM, Nicholas Marriott wrote: > sshd_config(5), look at "Match". That's what I was missing. Was reading over that and my mind was reading match for Host or Address only. Now I know I can do a Match pattern on User with PasswordAuthentication. Thanks Nicholas and Eugene

Re: Disable SSH passwords per user

2010-01-04 Thread Ted
On Tue, Jan 5, 2010 at 11:32 AM, Eugene Yunak wrote: > You can use per user rules in sshd_config, just read the man page. I've read the man page a number of times, and didn't see that. The closest thing was is "AllowUsers", but this is for enabling and disabling logins per user, not limiting a u

Re: Disable SSH passwords per user

2010-01-04 Thread Nicholas Marriott
sshd_config(5), look at "Match". You may also want to look at command= in sshd(8). And of course you can always set an impossible password hash to prevent password logins... On Tue, Jan 05, 2010 at 11:18:39AM +1100, Ted wrote: > Had a quick google and search or marc, but came up with no answers

Re: Disable SSH passwords per user

2010-01-04 Thread Eugene Yunak
2010/1/5 Ted : > Had a quick google and search or marc, but came up with no answers. > > Is it possible to disable password based logins per user (like with > the adduser --disabled-password in linux) on OpenBSD, and therefore > have the user only use SSH Keys? I'm aware of the sshd_config setting