Re: [gentoo-user] [footnote] The purpose of pam

2010-01-28 Thread Ward Poelmans
On Wed, Jan 27, 2010 at 23:04, Mick michaelkintz...@gmail.com wrote: What would be the pam-way to only allow remote ssh logins using pubkeys and completely forbid ssh paswd?  I used to remove allow pam from sshd_config.  Is there a better pam-centric way of doing the same thing? Put

Re: [gentoo-user] [footnote] The purpose of pam

2010-01-28 Thread Alan McKinnon
On Thursday 28 January 2010 00:04:46 Mick wrote: On Wednesday 27 January 2010 11:01:52 Willie Wong wrote: On Tue, Jan 26, 2010 at 04:34:56PM -0800, walt wrote: After thinking awhile I realized that pam can be used to combine muliple forms of authentication to reduce the well documented

Re: [gentoo-user] [footnote] The purpose of pam

2010-01-27 Thread Stroller
On 27 Jan 2010, at 00:34, walt wrote: ... After thinking awhile I realized that pam can be used to combine muliple forms of authentication to reduce the well documented risk of single-factor authentication (like our traditional password system). ... Any sysadmins out there that can confirm my

Re: [gentoo-user] [footnote] The purpose of pam

2010-01-27 Thread Willie Wong
On Tue, Jan 26, 2010 at 04:34:56PM -0800, walt wrote: After thinking awhile I realized that pam can be used to combine muliple forms of authentication to reduce the well documented risk of single-factor authentication (like our traditional password system). Example: if I have an ordinary

Re: [gentoo-user] [footnote] The purpose of pam

2010-01-27 Thread Mick
On Wednesday 27 January 2010 11:01:52 Willie Wong wrote: On Tue, Jan 26, 2010 at 04:34:56PM -0800, walt wrote: After thinking awhile I realized that pam can be used to combine muliple forms of authentication to reduce the well documented risk of single-factor authentication (like our

[gentoo-user] [footnote] The purpose of pam

2010-01-26 Thread walt
Not too long ago there was a question here about why pam is needed (or not) but I can't find that thread at the moment :-/ Anyway, I said that I put auth sufficient pam_ssh.so in my /etc/pam.d/system-auth file so that I can ssh between the machines on my home network using my ssh key for login

Re: [gentoo-user] [footnote] The purpose of pam

2010-01-26 Thread Alan McKinnon
On Wednesday 27 January 2010 02:34:56 walt wrote: After thinking awhile I realized that pam can be used to combine muliple forms of authentication to reduce the well documented risk of single-factor authentication (like our traditional password system). Example: if I have an ordinary