Re: Compromised Linux box stories (Re: [SLUG] upgrading complicated installs

[Rick Welykochy <rick@xxxxxxxxxxxxx>]

peter@xxxxxxxxxxxxxxxxxx wrote:

> Depends how you set it up.  Mine has a `three tries and you're out'
> policy.  And as I use an ssh-agent on my (carry around) laptop,
> there's no chance of being locked out accidentally.

I assume three times password fails and you're out, right?
That's interesting.

Can one configure ssh so that the password attempts are TCP wrapped,
but the cert-based (ssh-agent) logins are always allowed, no
matter where you are?

cheers
rick



--
________________________________________________________________
Rick Welykochy || Praxis Services || Internet Driving Instructor

If stupidity got us into this mess, then why can't it get us out?
     --Will Rogers