sshd question

[Tony Baechler - BATS]

On 2015-04-22 12:41 AM, Marcos Almeida Azevedo wrote:
> 
> 
> On Tue, Apr 21, 2015 at 2:26 PM, Petter Adsen <petter at synth.no
> <mailto:petter at synth.no>> wrote:
> 
>     Can I set up sshd so that it requires key authentication on one
>     interface, but allows password logins on another, or do I need to run
>     two different sshd processes?
> 
> 
> Hello, I believe you need two different sshd processes


This is my understanding also from reading the documentation.  However,
another (and possibly better) option might be to run two different sshd
implementations.  Take a look at Dropbear for example.  It's small and is
set entirely by command line switches.  I realize that isn't ideal, but it
probably saves a little memory compared to running two openssh instances.
Another option is to run both on different ports.

Also, you can lock a user account so they can't login with any password but
a public key would still work.  Again, that isn't ideal, but that might work
if you don't have the same user trying to connect to both interfaces.