Home / server / Questions / 894297
In Process
Greg Dougherty
Asked: 2018-01-27 08:37:34 +0800 CST

Is there a way to set up passwordless / passphraseless ssh so can only come from one client?

  • 772

I know how to set up passwordless / passphraseless ssh. But my understanding is that setting it up that way means that if someone get ahold of the id_dsa file, they can then log in from any machine.

Is it possible to set up, on server X, that Y is an "authorized key" only when it's coming from client Z?

ssh

1 Answers

  1. You may restrict access by IP for every authorized_key. Just add the following line into authorized_keys on X something like:

    from="Z_IP" Y_id_rsa.pub

    In this case server X will be accessible via SSH using Y's key only when accessing from Z's IP-address.

    Also, you may add additional parameters. Here is examples: https://debian-administration.org/article/685/Restricting_SSH_logins_to_particular_IP_addresses

    • 3