ssh server configuration - Are public key and password exclusive?

[William Muriithi]

Christopher
> It *can* be enforced if the process that draws in entries for
> ~/.ssh/authorized_keys requires checking that the private key has a
> password.
>
Hmm, not sure I understood you.  How would you enforce it if you have
a contractor in USA and no physical access to his laptop during the
key pair generation?  Can you tell the private key is secured by a
password when all you have is the public key?

> As for "does not scale," I'm not sure that your requirement can be
> considered to "scale", but I think that requires explaining precisely
> what you mean, as "does not scale" is an overloaded term that itself
> 'does not scale'.
Agree, have misused the word scaling.  I meant it does now work if
some people are remote geographically
>
Thanks
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists