On Tue, Aug 31, 2010 at 10:51:08AM +0400, ???????? ???????????? wrote: > I want to set ssh authorization through unix/pam with mandatory public > key. I want will make sure that except the password the user has an > acknowledgement of legitimacy in the form of a public key. Thus the > password should be from unix/pam, not from key. > > I tried different variants. It turned out with key and without the > password, or the password undertook from a key, instead of from > unix/pam. Public key authentication does not involve a password, and it does not involve PAM. If you are attempting to require the use of a passPHRASE on the private key, then you need to be aware that the private key is only seen by the ssh client, not the server. The server has no idea whether the key was passPHRASE protected or not. Server-side passWORDS have nothing at all to do with public key authentication, or with the passPHRASES that are used to protect the private keys.
