Heyho!

Is there a magic combination of sshd_config features that allows:
* sftp (password authentication) for most users.

* key only regular ssh sessions for some few users

* forced-command key based auth sessions for most/all users (this is how NX
works: it sets up a key in authrorized_keys with command=nxsession or
similar.)


The problem I'm struggling with is that settings the user's shell to sftp-
server generally will make NX fail since it executes certain commands via
shell.

So I'd need a solution inside ssh: if a password is used, force sftp, if
authentication was via the key, allow regular login with the forced command
with the shell set to something /bin/sh-ish. Is this at all possible?

cheers
-- vbi


--
featured product: Debian GNU/Linux - http://debian.org