>> an ssh config setting, in shorewall, or somewhere else? > > You can: > > 1) use pam as described by Mike > > or > > 2) use sshd_config "AllowUsers"
Thanks a lot, I went with 'AllowUsers root' in sshd_config since sshd is the only service running on the system. - Grant > or > > 3) What I usually do is, disable pam in ssh so only keys are accepted. Only if > you have the key, you can login remotely. Of course that means you will have > to carry your usb pendrive with you all the time :-) > > Regards, > Norberto
