<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.24.5">
</HEAD>
<BODY>
On a recent Fedora system, running fail2ban and sshd not allowing root logins, I still get a certain number of failed ssh attempts every day. This is not a particular attractive target to attack. <BR>
<BR>
Is it possible to configure sshd to require both the public/private key AND a password to get in? It looks like the various flavors of Connectbox support public/private key, and while perhaps not full blown 2 factor authentication, it would eliminate the possibility of a successful guessing attack, (won't have key) and if I lost my phone or tablet with the key, the person with the tablet couldn't get in without the password. <BR>
<BR>
If so, any pointers to a recipe? sshd_config isn't quite replete with examples. <BR>
<BR>
Neal Rhodes<BR>
MNOP Ltd
</BODY>
</HTML>