Re: Security - Use of PasswordAuthentication by ltsp clients.

Warren   (and anybody else that is interested),

For your consideration and review,  I've made a series of updates 
available for you to pull from:
    http://john.ellson.com/ltsp-ellson
which result in ltsp using a separate sshd instance, thereby allowing, 
for example,  PassworAuthentication to be disabled
on the main sshd facing the internet.

Because I needed to modify the ltsp.spec for this change, the first two 
updates, #853, #854, just import
a copy of the spec, and provide a Makefile for creating rpms locally.

The key part of the change is in update #855.

No changes are required to sshd or its configuration.

If this change is accepted you will need to port the local changes to 
ltsp.spec to the version of ltsp.spec in Fedora's CVS.

Also, "ltsp-sshd" needs to be added to the chkconfig step #10 on
    https://fedorahosted.org/k12linux/wiki/InstallGuide

Regards.

-- 
John Ellson

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_____________________________________________________________________
Ltsp-developer mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-developer
For additional LTSP help,   try #ltsp channel on irc.freenode.net