digg

Facebook Connect Join Digg About
See the original image at mr-oss.com

SSH Password Tripwire using /etc/profile

mr-oss.com — A simple way to setup two stage password authentication for ssh connections. Using bash scripting inside of /etc/profile we create a second level of password authentication for remote ssh connections. Easy and effective.

Who dugg this?

Digg DudeWhat is Digg?

Digg is a place for people to discover and share content from anywhere on the web. Digg surfaces the best stuff as submitted and voted on by the community. Take the Tour to learn more.

4 Comments

show profanity settings
expand all
  • MrOss, on 11/08/2008, -0/+1Great information, thanks for sharing. I have tested all of your theories on my system
    1.
    root@slackware:~# ssh -l user192.168.0.1 hostname
    cliff@192.168.0.1's password:
    slackware
    root@slackware:~#

    It reports the hostname and ends the session


    2.
    user@slackware:~$ ssh 192.168.0.1 /bin/bash
    user@192.168.0.1's password:
    hangs indefinitely without allowing entry to interactive shell

    3.
    ssh -T 192.168.0.1
    user@192.168.0.1's password:
    hangs indefinitely without allowing entry to interactive shell

    I should put a catch under the pts section to exit out if the tty is not pts to avoid the hang.

    Great points, I will keep tinkering with this to see if I can break it. I tried to execute ssh host /bin/ksh but that one just hung also.

    Thanks for your input


  • dotCOMmie, on 11/08/2008, -0/+1I think the commercial SSH server supports multifactor authentication key+password. I wish the openssh server also did.
  • linuts, on 11/08/2008, -0/+1offs, angle brackets get chopped

    ssh host hostname

    ssh host /bin/bash

    ssh -T host
  • linuts, on 11/08/2008, -0/+1This is fairly easy to get around. ssh commands get run:

    ssh hostname

    And to get a shell, albeit without the standard shell prompts:

    ssh /bin/bash

    Another ugly, but effective work around:

    ssh -T

  • Add a Comment

    Login or register to comment!
    Or, sign-in super fast with your Facebook account ...


© Digg Inc. 2009 — Content created and posted by Digg users is dedicated to the public domain | Terms of Use Updated | Privacy Policy
DIGG, DIGG IT, DUGG, DIGG THIS, Digg graphics, logos, designs, page headers, button icons, scripts, and other service names are the trademarks of Digg Inc.