On Sun, 04 Apr 2010 23:49:59 +0200, Julian Fagir wrote:

> Hi,
> 
>> Is it possible to configure sshd such that both conditions are met:
>> 
>> 1. Root will be able to login only by using keys 2. Normal users will
>> still be able to use pam/keyboard-interactive
> 
> perhaps the sshd-option "PermitRootLogin" does match your requirements.
> To be found in sshd_config (5).
> 

Unfortunately it doesn't. Assuming you mean 'without-password' option,
I would have to disable ChallengeResponseAuthentication for everyone
which I would like to avoid.
It is not possible to disable ChallengeResponseAuthentication inside
match block.

_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Reply via email to