Subject: how to allow password authentication for httpd but not sshd
To: None <netbsd-help@NetBSD.org>
From: Henry Nelson <netb@yuba.kcn.ne.jp>
List: netbsd-help
Date: 03/27/2005 15:29:11
I'd like to allow simple password authentication (AuthType Basic) for a few
directories in my WWW tree (Apache), but on the same machine also running
sshd, I'd like to force the use of private keys/passphrase for login to shell
accounts.

If I set "PasswordAuthentication" to no in "/etc/ssh/sshd_config", then I
can't login to the web pages.  If I set it to yes, then httpd is happy, but
anyone can login to shell accounts with only a password.  Is there some way
to change the ability to use password authentication according to the protocol?

TIA

-- 
henry nelson
 | day job: | http://yuba.kcn.ne.jp/biorec/nehan/henken.html