Re: Force public key only

[David Knight French]

It depends on the version.

For OpenSSH:

        Protocol                2
        PubkeyAuthentication    yes             # default, ver 2 only

        KerberosAuthentication  no              # Turn off other authentications
        PasswordAuthentication  no
        RhostsAuthentication    no
        RhostsRSAAuthentication no

These can be in tghe config file but will be ignored with the above set.

        RSAAuthentication       no              # ver 1 only
        SkeyAuthentication      no              # Only works if                        
 
                                                # PasswordAuthentication yes

For ssh.com v2.x.x:

        AllowedAuthentications  publickey

You will also need to make sure no *Authentication lines are there.  If they 
are, they will look like the above options for OpenSSH.

Hope this helps,

        --Dave  
                
>From: "Dennis" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Subject: Force public key only
>Date: Fri, 26 Jan 2001 13:09:34 +1100
>MIME-Version: 1.0
>Content-Transfer-Encoding: 7bit
>X-Priority: 3 (Normal)
>X-MSMail-Priority: Normal
>Importance: Normal
>X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
>
>Hi all..
>
>Is it possible to force the sshd to insist on the use of public keys.
>If that fails, I'd like it to not accept any other form of authentication.
>
>Cheers
>Dennis

--
David Knight French                           
Black Mountain Computer Consulting
Voice: (858)279-4862
Email: [EMAIL PROTECTED]