[TriLUG] sshd question

[Alan Porter]

Blackburn, Marvin said the following:

>These are all great ideas; however, the application has to be able to
>login (with a password) to boxb.
>Unfortunately, I'm not looking for a work around.  I've got to be able
>to allow this.
>What I want to do, though, is only allow that functionality between box
>a and b.
>
>These are all great ideas, but they don't match what I'm trying to do. 
>
>  
>

At the risk of being redundant, what is wrong with this?

   PermitRootLogins yes
   AllowUsers alan bob tim root at boxa

This should allow a user from box A to log in to box B as root.
It will use passwords or keys or whatever authentication you
choose.  And it will NOT allow anyone to log in as root from
any place other than from box A.

Alan