Subject: how to allow password authentication for httpd but not sshd
To: None <netbsd-help@NetBSD.org>
From: Henry Nelson <netb@yuba.kcn.ne.jp>
List: netbsd-help
Date: 03/27/2005 15:29:11
I'd like to allow simple password authentication (AuthType Basic) for a few
directories in my WWW tree (Apache), but on the same machine also running
sshd, I'd like to force the use of private keys/passphrase for login to shell
accounts.
If I set "PasswordAuthentication" to no in "/etc/ssh/sshd_config", then I
can't login to the web pages. If I set it to yes, then httpd is happy, but
anyone can login to shell accounts with only a password. Is there some way
to change the ability to use password authentication according to the protocol?
TIA
--
henry nelson
| day job: | http://yuba.kcn.ne.jp/biorec/nehan/henken.html