Displaying 4 results from an estimated 4 matches for "keyauth".
2002 Jun 25
1
PAMAuthenticationViaKbdInt and KeyAuth
Hi there,
when enabling the option PAMAuthenticationViaKbdInt, a login with password is
always possible, even though when you disabled it with PasswordAuthentication
no and PermitRootLogin without-password!
Is this intended? Why is there no documentation about this (or at least a
waring in the default configuration file)?
The problem is, it is enabled in the default installation of Debian
2002 May 18
3
OpenSSH library
...es out of the fd is securely authenticated as coming from the user
returned by a ssh_get_user() call.
The OpenSSH daemon could be implemented something like:
Daemon starts up, reads the config file, initialises the ssh_transport
library with parameters such as acceptable auth methods, location of keyauth
files, port-forwarding allowed, etc, and then the library starts listening
for connections.
When a connection is received, the library handles all the negotiation of
algorithms and authentication methods, and once an acceptable authentication
occurs, the file descriptor (fd) is returned to the dae...
2004 Jul 14
3
Logging of wrong pubkey auth
Hello ml,
i've set up a ssh server with public-key authentication.
But soon i realized that wrong pubkey authentications are not shown in the logs.
So i wrote a small patch for monitor.c included as attachement.
patch against 3.8.1p1
$ patch -p0 < /path/to/keyauth-loggin.patch
Kindly regards,
Jan Gehring
2007 Jul 11
3
ssh tunneling and maildir
...pily via an ssh tunnel. My mutt is
configured to use IMAP, and the tunnel is as follows in my muttrc:
set tunnel="ssh -q mymailhost 'MBOX_LOCKS=fcntl MAIL=/home/jlbec/mail /usr/libexec/dovecot/imap'"
It should be pretty obvious that this logs into mymailhost as me
(via SSH keyauth) and runs /usr/libexec/dovecot/imap directly as a
foreground process. Setting MAIL, it points dovecot imap to my mbox
folders. dovecot imap speaks imap over stdin/out, this goes over the
ssh to mutt.
It works great. Really great. I don't need root access at all,
the server isn't runnin...