SSH: Can I force RSA auth for all but one account?

LeoNot · 07-08-2005, 06:41 PM

Is there a way to configure SSH such that password login is DISallowed for all accounts, *except* for the account used by my hosting service so that they can admin my box. I'd like them, and only them, to be able to SSH in with a normal account/password login.

(They're willing to use RSA keys, but it can slow down their response time.)

Thanks,

Leo

sundialsvcs · 07-10-2005, 11:55 AM

If it is possible, then it probably will have something to do with PAM (Pluggable Authentication Modules) if your system supports them as it probably does.

The concept behind PAM was to centralize the various authentication-schemes used by various subsystems so that they can be more easily administered. PAM might support rules like what you need, although I have never tried to do it.