SV: SV: Restrictions for password logins

2017-05-20 Thread Henrik Uggla
Yes, that would probably work. Thanks.

/HU

Från: dropbear-bounces+henrik.uggla=kristianstad...@ucc.asn.au 
<dropbear-bounces+henrik.uggla=kristianstad...@ucc.asn.au> för walter harms 
<wha...@bfs.de>
Skickat: den 19 maj 2017 17:00
Till: dropbear@ucc.asn.au
Ämne: Re: SV: Restrictions for password logins

Am 19.05.2017 16:34, schrieb Henrik Uggla:
> Permission to run one command, everything else should be denied.

why not modify .profile (or /bin/sh in /etc/profile) ?
anything else feels complicated.

re,
 wh


>
> /HU
> 
> Från: Matt Johnston <m...@ucc.asn.au>
> Skickat: den 19 maj 2017 14:46
> Till: Henrik Uggla
> Kopia: dropbear@ucc.asn.au
> Ämne: Re: Restrictions for password logins
>
> On Fri, May 19, 2017 at 07:42:21AM +, Henrik Uggla wrote:
>> Hi!
>>
>>
>> How can I set restrictions, like those given in authorized_keys, to all 
>> password logins?
>
> Hi Henrik,
>
> You can't set all of those restrictions like command= though
> you can disable TCP forwarding at compile time in options.h
>
> What restrictions were you looking at?
>
> Cheers,
> Matt


Re: SV: Restrictions for password logins

2017-05-19 Thread walter harms


Am 19.05.2017 16:34, schrieb Henrik Uggla:
> Permission to run one command, everything else should be denied.

why not modify .profile (or /bin/sh in /etc/profile) ?
anything else feels complicated.

re,
 wh


> 
> /HU
> 
> Från: Matt Johnston <m...@ucc.asn.au>
> Skickat: den 19 maj 2017 14:46
> Till: Henrik Uggla
> Kopia: dropbear@ucc.asn.au
> Ämne: Re: Restrictions for password logins
> 
> On Fri, May 19, 2017 at 07:42:21AM +, Henrik Uggla wrote:
>> Hi!
>>
>>
>> How can I set restrictions, like those given in authorized_keys, to all 
>> password logins?
> 
> Hi Henrik,
> 
> You can't set all of those restrictions like command= though
> you can disable TCP forwarding at compile time in options.h
> 
> What restrictions were you looking at?
> 
> Cheers,
> Matt


Re: Restrictions for password logins

2017-05-19 Thread Matt Johnston
On Fri, May 19, 2017 at 07:42:21AM +, Henrik Uggla wrote:
> Hi!
> 
> 
> How can I set restrictions, like those given in authorized_keys, to all 
> password logins?

Hi Henrik,

You can't set all of those restrictions like command= though
you can disable TCP forwarding at compile time in options.h

What restrictions were you looking at?

Cheers,
Matt


Re: Restrictions for password logins

2017-05-19 Thread walter harms


Am 19.05.2017 09:42, schrieb Henrik Uggla:
> Hi!
> 
> 
> How can I set restrictions, like those given in authorized_keys, to all 
> password logins?
> 
> 
did you try the generalsetup at /etc/ssh/ssh_config ?

re,
 wh



> regards
> 
> HU
> 


Restrictions for password logins

2017-05-19 Thread Henrik Uggla
Hi!


How can I set restrictions, like those given in authorized_keys, to all 
password logins?


regards

HU