OpenSSH does not (yet) support hostbased-authentication.
you need hostbased + pubkey or hostbased + passwd authentication
to achieve your goal. does your windows client support hostbased
authentication?
alternatively, you could use libwrap to restrict access to certain
ip-addresses.
On Fri, Jun 02, 2000 at 02:37:36PM +0700, Lukas Leonardo wrote:
> I tried "SSH Secure Shell 2.1.0 (Build 111)" client for win'9x. It can
> login to my Server with password. My question is how to reject such
> service at my server because I have not put this client's key at server
> but server accept it as long as the password is true? So I want to avoid
> some body that know a user password and use such SSH client from a
> computer that host key has not been registered at server.
