sshd question

Petter Adsen petter at synth.no
Wed Apr 22 07:58:30 UTC 2015


On Wed, 22 Apr 2015 00:49:12 -0700
Tony Baechler - BATS <bats at batsupport.com> wrote:

> On 2015-04-22 12:41 AM, Marcos Almeida Azevedo wrote:
> > 
> > 
> > On Tue, Apr 21, 2015 at 2:26 PM, Petter Adsen <petter at synth.no
> > <mailto:petter at synth.no>> wrote:
> > 
> >     Can I set up sshd so that it requires key authentication on one
> >     interface, but allows password logins on another, or do I need
> > to run two different sshd processes?
> > 
> > 
> > Hello, I believe you need two different sshd processes
> 
> 
> This is my understanding also from reading the documentation.

Yes, I couldn't find a way to do it either.

> However, another (and possibly better) option might be to run two
> different sshd implementations.  Take a look at Dropbear for
> example.  It's small and is set entirely by command line switches.  I
> realize that isn't ideal, but it probably saves a little memory
> compared to running two openssh instances. Another option is to run
> both on different ports.

Thanks, I'll take a look at that, it might be ideal for what I need to
do.

> Also, you can lock a user account so they can't login with any
> password but a public key would still work.  Again, that isn't ideal,
> but that might work if you don't have the same user trying to connect
> to both interfaces.

But that is exactly what I need to do :) It seems running two instances
is the only solution, I'll read up on Dropbear.

Thanks,

Petter


-- 
"I'm ionized"
"Are you sure?"
"I'm positive."
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 213 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20150422/d43e9f4d/attachment.sig>


More information about the ubuntu-users mailing list