search for: 20challengeresponseauthentication

Hi, I'd like to allow PAM authentication only from the local network, and from the Internet only allow public key authentication. A similar-enough problem has been discussed on this list previously: http://www.gossamer-threads.com/lists/openssh/dev/47179?search_string=match%20challengeresponseauthentication;#47179 More specifically, I would like to allow PAM authentication from the Internet only for users which I know use OPIE (that's because pam_opieaccess isn't flexible enough for this). That would be something like this: ChallengeResponseAuthentication no Match Address 10.0.0.0/8 Chall...