On Thu, Oct 21, 2010 at 07:46:50PM +0200, Bret S. Lambert wrote:
> On Thu, Oct 21, 2010 at 05:38:54PM +0000, Jay K wrote:
> > My ideal setup would be:
> > 1) no passwords ("*" in /etc/passwd or via vipw)
> > 2) only ssh for remote access
> > i.e. no password-based security, only something better
> > 3) except console, where anyone should be able to login
> > without any password (granted, I only have two users, root and jay)
>
> You can get almost the same thing by setting "PasswordAuthentication" to "no"
> in your sshd_config file, and hand out (...) simple passwords (...)
Well, except when someone runs login(1) from an SSH'ed shell...
I'm pretty sure you can just add a line along the lines of
ttyC0 "//bin/ksh" vt220 on
to /etc/ttys, if you insist.
Joachim
--
TFMotD: qdiv (3) - return quotient and remainder from division
http://www.joachimschipper.nl/