Re: SSH help (with a pinch of CVS) -- appending multiple keys in

["Bryan J. Smith" <b.j.smith@ieee.org>]

On Wed, 2004-10-27 at 02:22, Ken Keefe wrote:
> So here is my first problem. I have one system that we shall call CompA
> that is already configured to use public key auth. I can log in and only
> have to provide a password for my local key. Now, I need to do the same
> sort of thing for my personal server, CompB. How do I manage multiple
> keys like this?

You can _append_ multiple keys in the "~/.ssh/authorized_keys".

> Oh, one little hitch is that my user name for CompA is not the same as
> my user name for CompB.

Shouldn't matter, the name@host is after each key.  I'm not even sure
that matters either, I think the key ID is all that does.

> Next, what do I need to do on CompB to allow users to use public key
> authentication? How can I configure it to require public key auth
> instead of allowing both? Is there a way to set priority for one method
> over the other?

In most distributions, public key authentication is already preferred
over password authentication.  But if you want to disable password
authentication, then just set the line in "/etc/ssh/sshd_config":  
  PasswordAuthentication no

And restart the daemon (killall -1 sshd or /etc/init.d/ssh[d] restart).

-- 
Bryan J. Smith                                  b.j.smith@ieee.org 
------------------------------------------------------------------ 
"Communities don't have rights. Only individuals in the community
 have rights. ... That idea of community rights is firmly rooted
 in the 'Communist Manifesto.'" -- Michael Badnarik



-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.