[Tfug] OpenSSH question

Chris Hilton tfug@tfug.org
Tue Jun 11 13:18:01 2002


On Mon, 10 Jun 2002 13:04:38 -0700 (MST)
"Mike Morrell" <mike@themorrells.org> wrote:

>   In OpenSSH is there a way to specify the authentication method by
> connecting host name?  I would like to set up a trusted domain to
> connect using keyboard-interactive and password for the authentication
> but force all other hosts to only use a public key.  Ideally I would
> like the configuration to be configurable by each user (in their
> $home/.ssh ?) and not use the global sshd_config.  I checked the man
> pages but I could not find host type control for incoming connections
> to sshd.
> 
> 
> 
> Mike

Mike-

I don't see a way to do this with one sshd_config file.  I can't figure
any combination of flags that would allow per host login control.  I
have to beleive there is a slick way to do this and if anyone knows, I'm
interested also.  $HOME/.shosts files (see 'man sshd') might help with
some of this.  A clunky way to do it might be to have a couple of
sshd_config files, the trusted domain sshd configured in one listening
to port 22 and the other sshd configured in the second listening to 22x.

-C-