From owner-freebsd-questions@FreeBSD.ORG Wed May 25 13:42:13 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1399916A41C for ; Wed, 25 May 2005 13:42:13 +0000 (GMT) (envelope-from dot.sn1tch@gmail.com) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.200]) by mx1.FreeBSD.org (Postfix) with ESMTP id B70FC43D1F for ; Wed, 25 May 2005 13:42:12 +0000 (GMT) (envelope-from dot.sn1tch@gmail.com) Received: by wproxy.gmail.com with SMTP id 69so206269wra for ; Wed, 25 May 2005 06:42:12 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=YHt6EAQox54f0SbCebYGZ9rlZnBHtjRPlkqxiSaH0yvJFqZKvoEJatKIdZmWC/QjG80fnJ4Y7T14L25SgTCT7B9b+R/PpnCYc+TrfKQF8RD1hPzPPM0zuiyVR57Xydvpc9JR+fmB9ScOYIiGtlS4zua6e/qBeD9ASrUulVLqRHg= Received: by 10.54.23.26 with SMTP id 26mr339197wrw; Wed, 25 May 2005 06:35:32 -0700 (PDT) Received: by 10.54.31.72 with HTTP; Wed, 25 May 2005 06:35:32 -0700 (PDT) Message-ID: Date: Wed, 25 May 2005 09:35:32 -0400 From: sn1tch To: freebsd-questions@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Subject: User mngmt using SSH2 and Public Key X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: sn1tch List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 May 2005 13:42:13 -0000 I recently installed ssh2 from ssh.com and everything is working great. In a few months I am going to setup a cluster and the system with ssh2 is going to be the gateway between the outside and the cluster. Instead of traditional password based access I want to use some kind of key so that I know the person accessing the system is one that I have granted access to and is allowed it. Is this a viable solution or am I barking up the wrong tree? I have read a few articles public key authentication but if anyone could tell me more I would be greatly appreciative. Thanks Joe --=20 You've officially been Gmailed