[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: OT: disabling login



On Fri, 22 Feb 2002 00:43:53 +0100 Hans Ekbrand <hans@sociologi.cjb.net> wrote:

> On Thu, Feb 21, 2002 at 05:23:09PM -0600, Ron Johnson wrote:
> > On Thu, 21 Feb 2002 17:16:38 -0600 Dimitri Maziuk <dmaziuk@yola.bmrb.wisc.edu> wrote:
> > > Note that they can still login via ssh + key auth, so remove
> > > their ~/.ssh/authorized_keys[2] if you have that (rename 
> > > instead of removing, if you want to re-enable it later).
> > 
> > How, if the password has been mangled?
> > 
> 
> Authentication with public/private keys does not involve any password on the server side, so why would the server-side password matter?

Wel....  I assumed (yes, laugh at me, call me an MSCE) that the
key pairs _and_ PAM was used during ssh login.

What it sounds like you are saying is that there are (can be)
different passwords for logging in from ssh vs. telnet/console/etc.
That sounds bizarre.

-- 
+------------------------------------------------------------+
| Ron Johnson, Jr.        Home: ron.l.johnson@cox.net        |
| Jefferson, LA  USA      http://ronandheather.dhs.org:81    |
|                                                            |
| 484,246 sq mi are needed for 6 billion people to live, 4   !
! persons per lot, in lots that are 60'x150'.                |
! That is ~ California, Texas and Missouri.                  !
! Alternatively, France, Spain and The United Kingdom.       |
+------------------------------------------------------------+



Reply to: