[scponly] Alternate authentication methods for sftp

Sven Hoexter sven at timegate.de
Sat Dec 20 12:13:35 EST 2003


On Sat, Dec 20, 2003 at 07:48:21PM +1000, Andy Gayton wrote:

Hello Andy,

> Is it possible to authenticate of something besides the unix system 
> password file for sftp only users?  Perhaps from a database or from ldap?
For a realy good backend with a large user base I would try to find a
pam module. Ok if you're not using pam I've no good idea.

> The reason I ask is since the users are sftp only, there doesn't seem to be 
> a way for them to maintain their password except perhaps via a web 
> interface.  I can't think of anyway to let the users update the unix system 
> password file via a web interface without opening up a lot of potential 
> security holes.
Search the list archives, one or two methods were mentioned IIRC.

Sven
-- 
          Das Weihnachtskonzert
               COMBO GUANO
23.12.2003, Saal Norhausen Lev. Rheindorf
        http://www.comboguano.de


More information about the scponly mailing list