On Sun, Sep 07, 2008 at 10:43:55AM -0700, Derek Tattersall wrote: > David Burgess wrote: > I did figure that out eventually. The issue was that I had password log > in through ssh disabled. I have been using a public key file instead. > > So the next question is... > > Is there a good secure way to allow password log ins over the ltspbr0 > interface which is bound to eth0, while restricting logins over the eth1 > interface which is connected to the internet? What I would prefer is to > not allow password log ins from the internet without a public key, while > allowing users to log in from my inside network by password. > > How would I configure sshd to do this? > > Also, how can I configure ltsp to connect to the server over a different > port than the default ssh port 22? One solution to my problem would be > to run 2 different ssh servers. One bound to port 22 and connected to > the outside world, and another connected to some other port and serving > my ltsp network. Has anyone set up something like this? How did you go > about it?
This thread may be of some use: http://www.mail-archive.com/ltsp-discuss@lists.sourceforge.net/msg33684.html I'm currently running 2 instance of ssh on the same interface, but on 2 different ports with 2 different config files (which lets me disallow password authentication on the internet, but allow it on the local network). Let me know if you need any further assistance. -Rob ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _____________________________________________________________________ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP help, try #ltsp channel on irc.freenode.net
