My own quick and dirty experiment leads me to believe
what I'm trying to do is impossible, but if I don't
ask, I'll never know.
I want to run a second sshd to handle authpf and only
authpf. My logic behind that is I don't want to
expose my 'normal' sshd without some proof that you
should be able to access it.
Chrooting sshd worked without any problems. My logic
for this was forcing the authpf-only sshd to use a
different /etc/passwd with users that only have authpf
as their shell.
Anyway, using the chrooted ssh for normal ssh usage
worked without a problem. Switching a test user's
shell to authpf didn't. I got the normal banner
"Welcome to OpenBSD. . . " and then the session
immediately terminated.
Is what I am trying to accomplish possible? If it is,
is there another way to accomplish the same thing?
Specifically, only this group of users is allowed to
login to this sshd?
Thanks in advance
-Matt
____________________________________________________
Start your day with Yahoo! - make it your home page
http://www.yahoo.com/r/hs