This is the mail archive of the
mailing list for the Cygwin project.
Re: ssh Authentication--RSA/Password
- To: <cygwin at cygwin dot com>
- Subject: Re: ssh Authentication--RSA/Password
- From: "Michael Erdely" <cygwin at cygwin dot com>
- Date: Sun, 1 Apr 2001 13:03:19 -0400
- References: <F224PGmYCESUQoPqajB0001264c@hotmail.com>
You can currently run sshd using RSA authentication. You just have to have
sshd running as that user. You could run different instances of sshd for
each user to log on on a different port (2201, 2202, 2203, . . .)
----- Original Message -----
From: "Karl M" <firstname.lastname@example.org>
Sent: Sunday, April 1, 2001 12:29 PM
Subject: ssh Authentication--RSA/Password
> Hi Corinna and All...
> I need to allow multiple users to log on to a win2k system with ssh, but I
> am concerned about the security of allowing password authentication. I
> understand that curently you need to get the password to the sshd host so
> that the setuid can work and that this is why you use password
> authentication. You mentioned that some other software would be required
> eliminate this need.
> How big a job is this and how would it work?
> Are you considering writing it in the future?
> Is there annother way we could get the password to the sshd host?
> I would be willing to type a passphrase and a password to log in. The
> passphrase would allow RSA authentication; the password would allow the
> setuid to work. Then I would disable password authentication in the
> sshd_config file. I would then have a secure authentication without
> (as much) about users selecting weak passwords. I don't see any security
> holes introduced by this, as the tunnel is open when we bring the password
> What are your thoughts?
> Get your FREE download of MSN Explorer at http://explorer.msn.com
> Want to unsubscribe from this list?
> Check out: http://cygwin.com/ml/#unsubscribe-simple
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple