On Tue, 2005-31-05 at 11:45 +0200, Maciej Żenczykowski wrote:
a) accept RSA authentication for all but root from any IP b) accept RSA authentication for root from a couple IPs/Netmasks c) accept password authentication for all but root from a dozen Netmasks d) accept password authentication for root from 3 local netmasks only
ie. make authentication depend on the USER,METHOD,CLIENT-IP triplet...
That should all be possible by adding the appropriate parameters in the /etc/ssh/sshd_config file. Also read the sshd_config man page.
HTH,
Ranbir