login about faq

How does one allow certain groups to log into Tectia 6.2 running on Solaris 10 using /etc/ssh2/ssh2-server-config-xml?

asked Dec 19 '13 at 20:34

sotodeny's gravatar image

sotodeny
1111

I have a similar question. Lets say I have group called ScriptGroup and group called NormalGroup. I want ScriptGroup to be able to log in using Public Key auth. I want NormalGroup to be able to log in using Password auth.

Is this possible?

(Apr 10 '14 at 02:04) Matt Matt's gravatar image

Is it possible to have an authentication rule based on IP Address? This would accomplish my goal as well. I know that the ScriptGroup would always have the same IP. So ScriptGroup's IP would have different authentication rules from NormalGroup's IP... Is that possible?

edit: I don't want to turn on host based auth.

(Apr 15 '14 at 01:43) Matt Matt's gravatar image

This post has helped answer my questions and it shows how to do this using user names.

For those wanting to see a working example based on IP addresses here is my config:

<authentication-methods login-grace-time="600">
<authentication name="ScriptUser" action="allow" password-cache="no">
         <selector>
        <ip address="192.168.2.10" />
        </selector>
        <auth-publickey />
 </authentication>

    <authentication name="NormalUsers" action="allow" password-cache="no">
        <auth-publickey />
        <authentication name="domain-auth" action="allow" >
            <auth-keyboard-interactive>
                <submethod-pam />
            </auth-keyboard-interactive>
        </authentication>
    </authentication>
</authentication-methods>

If your Ip address is 192.168.2.10 you only get public key auth. Everyone else would get public key with pam auth.

link

answered Apr 15 '14 at 02:47

Matt's gravatar image

Matt
568913

edited Apr 15 '14 at 03:03

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or __italic__
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×14

Asked: Dec 19 '13 at 20:34

Seen: 3,169 times

Last updated: Apr 15 '14 at 03:03

All user contributed content licensed under the cc-by-sa license.
Powered by OSQA.