passwordless ssh from laptop

Eero Volotinen eero.volotinen at iki.fi
Wed Dec 28 06:46:04 UTC 2016


I think this is also possible. see example at:

https://serverfault.com/questions/677366/disable-two-step-ssh-authentication-for-trusted-addresses/677374

Eero

2016-12-28 0:16 GMT+02:00 Karl Auer <kauer at biplane.com.au>:

> On Tue, 2016-12-27 at 08:09 +0200, Eero Volotinen wrote:
> > google authenticator or ubikey is easy and cheap solution to
> > implement :)
>
> I'd like to implement that on my remote logins, without having to
> equally enforce it on local logins to the same systems. As far as I can
> tell, something like TOTP has to be implemented as a PAM module on the
> account - which means that it isn't only used during an ssh login.
>
> I can see why - otherwise ssh would have to know how to do TOTP itself,
> whereas at the moment it just provides a channel for whatever
> challenge-response the host systems wants to do.
>
> Regards, K.
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Karl Auer (kauer at biplane.com.au)
> http://www.biplane.com.au/kauer
> http://twitter.com/kauer389
>
> GPG fingerprint: E00D 64ED 9C6A 8605 21E0 0ED0 EE64 2BEE CBCB C38B
> Old fingerprint: 3C41 82BE A9E7 99A1 B931 5AE7 7638 0147 2C3C 2AC4
>
>
>
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/
> mailman/listinfo/ubuntu-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20161228/db02a22e/attachment.html>


More information about the ubuntu-users mailing list