[Gslug-general] OpenSSH question: can I REQUIRE both a password & key-file

[Ian Gallagher]

You would want PasswordAuthentication set to no, and then specify a
passphrase for the ssh private key when you generate it on the client
machine. I'm not sure if you can mandate that ssh client keys have
passphrases - I don't know that the server has any way to know the
difference. Make sure you don't accidently have other authentication modes
enabled as well. You can ensure what types are available with 'ssh -v
hostname'.


Hope that helps,
-Ian

On Mon, Nov 3, 2008 at 03:36, David <davidm777 at yahoo.com> wrote:

> I'd really like to use both a key-file and still require a password.  The
> scenario is Windows laptops ssh-ing (PuTTY) into either an openSUSE 10.3 or
> Ubuntu 8.10 system.
>
> I can get it so that the key-files 'work' but I can't make them required.
> That is, a user can log-in without having a key-file at all - so long as
> they user their password.
>
> I've set the following 2 lines in sshd_config:
> PasswordAuthentication yes
> PublickeyAuthentication yes
>
> Any ideas on what I'm misunderstanding or possibly forgetting to set?
> David
>
>
> _______________________________________________
> Gslug-general mailing list
> Gslug-general at gslug.org
> http://lists.gslug.org/mailman/listinfo/gslug-general
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.ifokr.org/pipermail/gslug-general/attachments/20081103/97b1d2bb/attachment.html