Hot answers tagged

2

There are two things that you want to achieve: Disallow the authentication using ~/.ssh/authorized_keys As proposed set AuthorizedKeysFile to some different place. If there is the discussed requirement, it will not be evaluated (otherwise there is nothing more to solve). Set AuthorizedKeysCommand The command will return you the authorized keys from your ...


1

A simpler approach would be: Just tell your users to add an alias for your git-server to the ~/.ssh/config. Then they have the same convenience as with github and you don't have to do some weird redirections on the server side. For example: # put into ~/.ssh/config Host mygitlab Hostname git.example.org Port 10022 Then your users can just clone etc. ...


1

The rssh manpage indicates it should be the login shell of these users: The system administrator should install the shell on the restricted system. Then the password file entry of any user for whom it is desireable to provide restricted access should be edited, such that their shell is rssh. For example: ...



Only top voted, non community-wiki answers of a minimum length are eligible