sshd access by IP address OR certificate
 

Hi,
I have a site in India that needs to be accessed by our offices round the world. I have added AllowUsers lines for the static IP's in those offices.

However, we also have a couple of people who travel and don't have static ip's.

Is it possible to enable both AllowUsers for the offices and have certificate access for the others?

Regards,
Ian Collins.

And by "certificate" you mean private key (as used by sshd(8)'s Pubkey Authentication)?

If so, check this thread and the sshd_config(5) Match directive.

Older versions of OpenSSH do not have Match, though. If that's the case for you, then share the OS / version you're using (along with your OpenSSH version).