Re: Unix (pam) authorization with required public key

Le 01/09/10 01:35, Robert Hajime Lanning a écrit :
> ssh is not written to do that.
> 
> It authorizes on first successful authentication.
> 
The SSH2 protocol certainly permits this. It's a partial authentication,
and permits to force the client to use another authentication mean while
telling that the first way was a success.
http://tools.ietf.org/html/rfc4252#section-5.1

I do not know if it's supported by openssh, but it sure is in some
implementations (libssh from http://www.libssh.org does).

Aris