Re: [gentoo-user] [footnote] The purpose of pam

2010-01-28 Thread Alan McKinnon
On Thursday 28 January 2010 00:04:46 Mick wrote: > On Wednesday 27 January 2010 11:01:52 Willie Wong wrote: > > On Tue, Jan 26, 2010 at 04:34:56PM -0800, walt wrote: > > > After thinking awhile I realized that pam can be used to > > > combine muliple forms of authentication to reduce the well > > >

Re: [gentoo-user] [footnote] The purpose of pam

2010-01-28 Thread Ward Poelmans
On Wed, Jan 27, 2010 at 23:04, Mick wrote: > What would be the pam-way to only allow remote ssh logins using pubkeys and > completely forbid ssh paswd?  I used to remove allow pam from sshd_config.  Is > there a better pam-centric way of doing the same thing? Put "PasswordAuthentication" to no in

Re: [gentoo-user] [footnote] The purpose of pam

2010-01-27 Thread Mick
On Wednesday 27 January 2010 11:01:52 Willie Wong wrote: > On Tue, Jan 26, 2010 at 04:34:56PM -0800, walt wrote: > > After thinking awhile I realized that pam can be used to > > combine muliple forms of authentication to reduce the well > > documented risk of single-factor authentication (like our

Re: [gentoo-user] [footnote] The purpose of pam

2010-01-27 Thread Willie Wong
On Tue, Jan 26, 2010 at 04:34:56PM -0800, walt wrote: > After thinking awhile I realized that pam can be used to > combine muliple forms of authentication to reduce the well > documented risk of single-factor authentication (like our > traditional password system). > > Example: if I have an ordin

Re: [gentoo-user] [footnote] The purpose of pam

2010-01-27 Thread Stroller
On 27 Jan 2010, at 00:34, walt wrote: ... After thinking awhile I realized that pam can be used to combine muliple forms of authentication to reduce the well documented risk of single-factor authentication (like our traditional password system). ... Any sysadmins out there that can confirm my re

Re: [gentoo-user] [footnote] The purpose of pam

2010-01-26 Thread Alan McKinnon
On Wednesday 27 January 2010 02:34:56 walt wrote: > After thinking awhile I realized that pam can be used to > combine muliple forms of authentication to reduce the well > documented risk of single-factor authentication (like our > traditional password system). > > Example: if I have an ordinary

[gentoo-user] [footnote] The purpose of pam

2010-01-26 Thread walt
Not too long ago there was a question here about why pam is needed (or not) but I can't find that thread at the moment :-/ Anyway, I said that I put "auth sufficient pam_ssh.so" in my /etc/pam.d/system-auth file so that I can ssh between the machines on my home network using my ssh key for login