[ale] Possible to configure sshd to require key AND password?

Neal Rhodes neal at mnopltd.com
Wed Jul 20 11:33:47 EDT 2011


On a recent Fedora system, running fail2ban and sshd not allowing root
logins,    I still get a certain number of failed ssh attempts every
day.    This is not a particular attractive target to attack. 

Is it possible to configure sshd to require both the public/private key
AND a password to get in?   It looks like the various flavors of
Connectbox support public/private key, and while perhaps not full blown
2 factor authentication, it would eliminate the possibility of a
successful guessing attack, (won't have key) and if I lost my phone or
tablet with the key, the person with the tablet couldn't get in without
the password. 

If so, any pointers to a recipe?   sshd_config isn't quite replete with
examples. 

Neal Rhodes
MNOP Ltd
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20110720/df82ddb5/attachment.html 


More information about the Ale mailing list