Re: Disabling password authentication for ssh on Tiger

In article <dqSdnQp9l_JbP5_eRVn-ig@xxxxxxxxxxxx>,
Troubled Tony <tt@xxxxxxxxxxx> wrote:

> Placebo <placebo@xxxxxxxxxxxx> wrote:
>
> > What won't let root do what?
>
> Let root log in without a password.

Ah. I don't have the root account enabled, and I don't permit root
logins over ssh anyway.


> I have a script that causes SSH to not respond until you give it an
> initial (passwordish) response, then it allows one SSH connection to
> work. It then automatically goes back to needing the extra password.
>
> I created the script after seeing ssh login attempts.
> It stopped them dead. Let me know if you want to see the script.

This is my reason for disabling password authentication. Hackers could
try all the user names they want, but they won't be able to get in.

> > I followed this advice:
> >
> > <http://www.wsrcc.com/wolfgang/sshd-config.txt>
> >
> > and modified SSH to use RSA keys.
>
> Hope it is what you're looking for.

Yes, that's essentially what I'm doing, and it doesn't seem to work. If
I try to log in from an account with no keys, it should fail saying
there are no authentication methods left; instead, a password prompt
still appears and allows me to log in.
.

Relevant Pages

  • Re: Problems with ipfw and ssh
    ... > I started yesterday playing with it / testing it, ... > whole script here just in case something else is wrong... ... You seem to be missing a 'setup' keyword in the ssh rule:-/ ... Initially i sent the mail because of the failure to su as root (as ...
    (freebsd-questions)
  • RE: Linux hacked
    ... Also, what exactly did the history file show, can you paste it into a mail ... > First let me say I'm a security novice. ... > been unsuccessful in getting root back. ... > via ssh but you could su in once logged in as one of three users. ...
    (Security-Basics)
  • Re: Linux hacked
    ... To find out what kernel version you are running, type "uname -a" without ... > been unsuccessful in getting root back. ... > via ssh but you could su in once logged in as one of three users. ...
    (Security-Basics)
  • Re: ssh tunnel - remote access through nat
    ... The thing is that if I just simply create an rc script to achieve this, ... the script is run under root and ssh cannot make use of public key ... use the "ssh -i" option to pass the user's identity (ie, ... complain that identity file ownership doesn't match user running it. ...
    (freebsd-questions)
  • Re: X11Forwarding, ssh -X, and /bin/su
    ... ]>but I'm not really tunneled using ssh then, ... ]connecting to the X server and have the home directory NFS-mounted ... ](unless you leave root unmapped over NFS, ... ]root-readable place and set the environment $XAUTHORITY variable ...
    (comp.security.ssh)