[ale] Possible to configure sshd to require key AND password?

[Charles Shapiro]

You can associate a password with an ssh key.

-- CHS


On Wed, Jul 20, 2011 at 11:33 AM, Neal Rhodes <neal at mnopltd.com> wrote:
> On a recent Fedora system, running fail2ban and sshd not allowing root
> logins,    I still get a certain number of failed ssh attempts every day.
> This is not a particular attractive target to attack.
>
> Is it possible to configure sshd to require both the public/private key AND
> a password to get in?   It looks like the various flavors of Connectbox
> support public/private key, and while perhaps not full blown 2 factor
> authentication, it would eliminate the possibility of a successful guessing
> attack, (won't have key) and if I lost my phone or tablet with the key, the
> person with the tablet couldn't get in without the password.
>
> If so, any pointers to a recipe?   sshd_config isn't quite replete with
> examples.
>
> Neal Rhodes
> MNOP Ltd
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>
>