LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 11-15-2006, 02:30 PM   #1
zhjim
Senior Member
 
Registered: Oct 2004
Distribution: Debian Squeeze x86_64
Posts: 1,438
Blog Entries: 11

Rep: Reputation: 182Reputation: 182
ssh login without password for only one user


Hy folks,

I have a bit of a question for ya all.

I wanted to make meself a shell on arbornet.org. And to achive that you only telnet or ssh to their server and as a login you provide "newuser" and then you are prompted with some things to setup your shell. No password no nothing.

So how do they do it. I check on the web but could not find any hints. I know that trick with the keyfile to autmaticaly login, but how can it be done that sshd does not even asks for a password when the loginname is say "newuser".

Greets zhjim
 
Old 11-15-2006, 03:15 PM   #2
Bruce Hill
HCL Maintainer
 
Registered: Jun 2003
Location: Tupelo, MS
Distribution: Gentoo
Posts: 6,926

Rep: Reputation: 124Reputation: 124
You can configure ssh so that you use passwordless logins.
As for how 'they' do it, why not ask 'them'?
 
Old 11-15-2006, 03:22 PM   #3
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 197Reputation: 197
It's most likely an actual user that doesn't require a password but it's sole purpose or the only thing allowed is to run a script to setup new users on their systems.

Say for instance I gave you a ssh login to one of my servers and set your shell to be /usr/bin/passwd

Everytime you login, it will ask for you to change your password and once changed, your logged out. It basically means you have no valid shell, you're allowed to run only that executable provided as your shell and that's all. That's what I'd imagine what they are doing with the "newuser" user they have setup.
 
Old 11-16-2006, 01:22 AM   #4
zhjim
Senior Member
 
Registered: Oct 2004
Distribution: Debian Squeeze x86_64
Posts: 1,438
Blog Entries: 11

Original Poster
Rep: Reputation: 182Reputation: 182
Quote:
Originally Posted by trickykid
Say for instance I gave you a ssh login to one of my servers and set your shell to be /usr/bin/passwd
First I thought so too. Just change the shell in passwd but trying I was still asked for a password.

I also read that you can run sshd as a user and then only this user is able to login. And when you give a nopassword in config all should be set. One idea but don't think they did this.

Quote:
Originally Posted by Bruce Hill
As for how 'they' do it, why not ask 'them'?
Your totaly right man. Hope they answer this question. Might be some security issue but don't think so. I'll just ask them and report back

Thanks for your answers
 
Old 11-21-2006, 04:31 PM   #5
zhjim
Senior Member
 
Registered: Oct 2004
Distribution: Debian Squeeze x86_64
Posts: 1,438
Blog Entries: 11

Original Poster
Rep: Reputation: 182Reputation: 182
Just wanted to report the status.

Till now I have no answer beside that one email bounced. But will investigate further. Maybe the coming weekend will show some possible solutions.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Auto-login Without user and password hraposo Fedora 1 07-12-2006 07:15 AM
User login without password Artik Debian 5 05-11-2005 12:56 PM
ssh without user password question tonyfreeman Linux - Security 2 10-26-2004 11:02 AM
how to deny password login in the ssh? please u2911 Linux - Security 4 07-02-2004 12:42 AM
how to login as user who has no password danahata Linux - Newbie 4 08-20-2003 05:57 PM


All times are GMT -5. The time now is 07:58 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration