Kosala , You can still use SSH with PAM and skip both password and key authentication by changing the following entry in /etc/pam.d/sshd file and commenting other auth entries.
auth sufficient pam_nologin.so no_warn i.e. Change the pam_nologin.so to "sufficient" in the auth category and comment all others in this category (I guess even commenting other entries may not be required since we made it "sufficient" but it has to be the first entry, you can try that out). -Sharath. -----Original Message----- From: Christian Grunfeld [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 15, 2008 1:27 AM To: Kosala Atapattu Cc: chaoson; secureshell@securityfocus.com Subject: Re: Disable SSH authentication As simple as: server side: nc -l -p 1234 -e /bin/bash client side: nc <destination ip > 1234 cheers ! 2008/10/14 Kosala Atapattu <[EMAIL PROTECTED]>: > running commands with Netcat... even wierder.... > > This is not the answer to your question. May be you can try good old > "rsh" with the "hosts.allowed"... In some internal networks (withing > the same net zone) I have used that lot... where security is not much > of a concern. > > Kosala > > 2008/10/14 Christian Grunfeld <[EMAIL PROTECTED]>: >> Hi, >> >> strange question in a ssh discussion list ! >> May be you can use netcat on both sides with standar input and output >> redirected from/to a console. >> >> Cheers >> Christian >> >> >> 2008/10/13, chaoson <[EMAIL PROTECTED]>: >>> Hi, >>> >>> I'm running openssh-4.3p2. >>> >>> I need to ability to run a command on trusted machine remotely. So far as >>> I know, we can use two ways to login to remote machine: >>> 1) Provide user name and password >>> 2) Public key authentication >>> >>> My question is that can we disable the SSH authentication so that we don't >>> need to either provide user account or the public key? Does anyone has the >>> idea? Thanks >>> >>> >>> >>> ___________________________________________________________ >>> 雅虎邮箱，您的终生邮箱！ >>> http://cn.mail.yahoo.com/ >>> >> > > > > -- > Kosala > -------------------------------------------- > Disclaimer: Views expressed in this mail are my personal views and > they would not reflect views of the employer. > -------------------------------------------- > blog.kosala.net > www.linux.lk/~kosala/ > www.kosala.net >
