How can I provide ssh key-only authentication on port 22 and RADIUS-PAM-only authentication on another port without running 2 instances of sshd? This is on Debian-8.5
I was told it's possible on OpenBSD via login.conf, but linux has login.defs which is sytem auth only and RADIUS requires PAM which login.defs won't speak to.
If it's not possible, how can I setup a 2nd instance of sshd?
I tried setting up a 2nd instance with a simple service from ports, and that won't auto start. Besides sshd seems to have 3 service definitions in /lib/systemd/system:
Quote:
$ ls /lib/systemd/system/*ssh*
/lib/systemd/system/ssh.service /lib/systemd/system/ssh@.service /lib/systemd/system/ssh.socket
|
ort
