[Gllug] ssh authentification

Martin A. Brooks martin at hinterlands.org
Tue Jul 18 11:41:41 UTC 2006


Tethys wrote:
> The problem is that it's very difficult to enforce that. If a staff
> member wants to install a passwordless keypair that gives them access
> to your systems, how do you prevent it?
>   

Have the user send you both the public and private keys and test using 
ssh -i

Not ideal, I agree, but does enforce the policy.
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list