On Thursday 12 October 2006 09:44, Kalin KOZHUHAROV wrote:
> Francisco Olarte Sanz wrote:
> > On Thursday 12 October 2006 04:01, Peter Abrahamsen wrote:
> >> Which is a better idea, allowing key-only root access, or ssh'ing in
> >> as myself and running su/sudo/whatever? Either way, I'll set up
> >> iptables so that connection attempts from anywhere other than my
> >> office are -j DROP'ed.
> >
> >     Why don't you allow key-only ssh-access as yourself and then su/sudo ? I
> > normally do it this way, as I don't want to be logged in as root all the
> > time, as when I have administration to do I need to read log files and
> > move around, and this avoids stupid typos and the like.
>
> How do you permit key-only for non-root users??

PasswordAuthentication no
ChallengeResponseAuthentication no

Works for me, simple test at localhost.

F.O.S.
-- 
[email protected] mailing list

Reply via email to