Selective blocking of password authentication

Markus Friedl markus at openbsd.org
Tue Oct 29 22:21:21 EST 2002


On Mon, Oct 28, 2002 at 10:10:49PM -0800, David Grimes wrote:
> I'm running OpenSSH 3.4 and have the situation that some users want to 
> allow password authentication into their accounts and some explicitly
> want to disallow password authentication. Is this possible? I wasn't 
> able to come up with a way looking through ssh_config and sshd_config,
> as well as some FAQs. 
> 
> It seems the problem is that there is no scoping of directives in sshd_config,
> thus PasswordAuthentication is global for all users. Alternatively it seems
> like sshd should be able to check some file ~/.ssh/sshd_config for such an
> option.
> 
> Any help would be greatly appreciated.

this depends on your operating system support for these kinds of
things and should be possible with BSD_AUTH on OpenBSD or BSD/OS,
but i you are not using BSD_AUTH. perhaps PAM can do the same.



More information about the openssh-unix-dev mailing list