On Saturday January 17 2009 03:28:07 Grant wrote: > an ssh config setting, in shorewall, or somewhere else?
You can: 1) use pam as described by Mike or 2) use sshd_config "AllowUsers" or 3) What I usually do is, disable pam in ssh so only keys are accepted. Only if you have the key, you can login remotely. Of course that means you will have to carry your usb pendrive with you all the time :-) Regards, Norberto

