Hi,
on our machines, we can log using RADIUS or SSH (if RADIUS is not
installed)
the question is, how (if possible) to force all machines to try
authenticating people first with an SSH key (let say, one change for ssh
paraphrase) and only swap to radius if ssh authent fails ?
I don't know if it sounds idiot or what... my problem with radius is
that we have to wait for 1min between two consecutive loggins (and it
sux for massive scp on different machines) - we can't log twice with the
same radius key ...
Thanks for answers,
Jo
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
