How to ssh PAM authentication with any login info?
I am trying to configure that using ssh any use should be able to login to my server, with or without password ( preferable ). I played with nullok which doesn't require a user to enter the password but I have to create a user and let that user have 'empty password' I am wonder if there is any other way so that any with with empty password should be allowed to login.
the pam_permit modules allow to let anyone access w/o passwords
that said, i see no reason why anybody in his right mind would want to do that
that said, i see no reason why anybody in his right mind would want to do that
1) To log into servers with no password (like CRON backups) is an essential part of admin. The way you do this is by creating empty passprase keys to use. For example...
2) Be careful with empty passphrase keys, as once someone has the private key, they can login anywhere. So never deploy your private key anywhere, ever.
3) Best practice when using an empty passphrase key, is to limit the connection to only allowing the rsync command to run. In other words, the key can be used for rsync, then blocked for all other commands, like ssh/sftp.
https://www.guyrutenberg.com/2014/01/14/restricting-ssh-access-to-rsync/ provides a good overview of how to do this.
Fairly simple ~/.ssh/authorized_keys modification to the key entry.
ssh-keygen -q -N '' -b 2048 -t rsa -f ~/.ssh/backup.rsa -C 'Backup Key'
2) Be careful with empty passphrase keys, as once someone has the private key, they can login anywhere. So never deploy your private key anywhere, ever.
3) Best practice when using an empty passphrase key, is to limit the connection to only allowing the rsync command to run. In other words, the key can be used for rsync, then blocked for all other commands, like ssh/sftp.
https://www.guyrutenberg.com/2014/01/14/restricting-ssh-access-to-rsync/ provides a good overview of how to do this.
Fairly simple ~/.ssh/authorized_keys modification to the key entry.
Premium Content
You need an Expert Office subscription to comment.Start Free Trial