Utility to scan for unpassworded SSH privkeys?

Damien Miller djm at mindrot.org
Tue May 28 12:17:36 EST 2013


On Mon, 27 May 2013, Phil Pennock wrote:

> I prefer git these days, but do miss the Kerberised access.  If I were
> going to invest time in setting it up, I'd add OpenSSH on a non-standard
> port, configure a ForceCommand in the system-wide sshd_config for that
> sshd and then enable Kerberos an auth mechanism for that.

It's no longer necessary to run additional sshd instances to vary
configuration by port. You can do something:

Port 22
Port 2222
Match LocalPort 2222
	ForceCommand something


Darren added this in openssh-6.1.

-d


More information about the openssh-unix-dev mailing list