Heyho! Is there a magic combination of sshd_config features that allows: * sftp (password authentication) for most users. * key only regular ssh sessions for some few users * forced-command key based auth sessions for most/all users (this is how NX works: it sets up a key in authrorized_keys with command=nxsession or similar.) The problem I'm struggling with is that settings the user's shell to sftp- server generally will make NX fail since it executes certain commands via shell. So I'd need a solution inside ssh: if a password is used, force sftp, if authentication was via the key, allow regular login with the forced command with the shell set to something /bin/sh-ish. Is this at all possible? cheers -- vbi -- featured product: Debian GNU/Linux - http://debian.org
Attachment:
signature.asc
Description: This is a digitally signed message part.