Re: ssh passwords and publickeys
On Fri, 2005-09-23 at 14:44:20 -0500, J.D. Bronson proclaimed... Is there any way to accomplish this: 1. Use ssh with passwords internally (lan to lan connections) Yes. 2 Use ssh with publickeys externally (wan to lan connections) Yes! ...thanks! Thank you!
Re: ssh passwords and publickeys
J.D. Bronson wrote: No. Its not answering wrong. It crossed my mind...but I am not sure I can actually do this and if so, how do I specify the alternate config? start is as 'sshd -f BLAH' ? At 03:27 PM 9/23/2005, you wrote: just a guess, but can you run two instances of sshd with different conf files? .. each binding to a specific interface? is this answering a question with a question? J.D. Bronson wrote: Is there any way to accomplish this: 1. Use ssh with passwords internally (lan to lan connections) 2 Use ssh with publickeys externally (wan to lan connections) ...thanks! J.D. Bronson Off The Hook Phone Repair, Inc. 24 Hour Service // Free Estimates For Fast Repairs: CALL US - IF YOU CAN! Office: 414.978.8282 // Pager: 414.314.8282 J.D. Bronson Off The Hook Phone Repair, Inc. 24 Hour Service // Free Estimates For Fast Repairs: CALL US - IF YOU CAN! Office: 414.978.8282 // Pager: 414.314.8282 Yep, looks like it on the command line. sshd -f /etc/ssh/sshd2.config #ListenAddress 0.0.0.0
Re: ssh passwords and publickeys
just a guess, but can you run two instances of sshd with different conf files? .. each binding to a specific interface? is this answering a question with a question? J.D. Bronson wrote: Is there any way to accomplish this: 1. Use ssh with passwords internally (lan to lan connections) 2 Use ssh with publickeys externally (wan to lan connections) ...thanks! J.D. Bronson Off The Hook Phone Repair, Inc. 24 Hour Service // Free Estimates For Fast Repairs: CALL US - IF YOU CAN! Office: 414.978.8282 // Pager: 414.314.8282
Re: ssh passwords and publickeys
No. Its not answering wrong. It crossed my mind...but I am not sure I can actually do this and if so, how do I specify the alternate config? start is as 'sshd -f BLAH' ? At 03:27 PM 9/23/2005, you wrote: just a guess, but can you run two instances of sshd with different conf files? .. each binding to a specific interface? is this answering a question with a question? J.D. Bronson wrote: Is there any way to accomplish this: 1. Use ssh with passwords internally (lan to lan connections) 2 Use ssh with publickeys externally (wan to lan connections) ...thanks! J.D. Bronson Off The Hook Phone Repair, Inc. 24 Hour Service // Free Estimates For Fast Repairs: CALL US - IF YOU CAN! Office: 414.978.8282 // Pager: 414.314.8282 J.D. Bronson Off The Hook Phone Repair, Inc. 24 Hour Service // Free Estimates For Fast Repairs: CALL US - IF YOU CAN! Office: 414.978.8282 // Pager: 414.314.8282
Re: ssh passwords and publickeys
From: J.D. Bronson [mailto:[EMAIL PROTECTED] Is there any way to accomplish this: 1. Use ssh with passwords internally (lan to lan connections) 2 Use ssh with publickeys externally (wan to lan connections) ...thanks! I can't think of a way to do it with the same user account, but you could handle it for different users by not setting a password for users that will only connect externally, and set them up for key-based auth, and then do keys + set a password for internal user accounts. Alternatively, you may be able to use some PF magic to get external users redirected to an sshd listening on a different port on the box - one configured for only pubkey auth. DS
