From ed4b63b09785b89f5dcbd2517ff0bfd20632be85 Mon Sep 17 00:00:00 2001
From: Timo Boettcher <spida@pfsense.org>
Date: Sat, 2 Jun 2007 21:58:50 +0000
Subject: SSH-Key(only) Login

---
 usr/local/www/system_advanced.php | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

(limited to 'usr/local/www/system_advanced.php')

diff --git a/usr/local/www/system_advanced.php b/usr/local/www/system_advanced.php
index 7328782..e4ff952 100755
--- a/usr/local/www/system_advanced.php
+++ b/usr/local/www/system_advanced.php
@@ -52,6 +52,8 @@ $pconfig['disablefirmwarecheck'] = isset($config['system']['disablefirmwarecheck
 $pconfig['preferoldsa_enable'] = isset($config['ipsec']['preferoldsa']);
 $pconfig['enablesshd'] = $config['system']['enablesshd'];
 $pconfig['sshport'] = $config['system']['ssh']['port'];
+$pconfig['sshdkeyonly'] = $config['system']['ssh']['sshdkeyonly'];
+$pconfig['authorizedkeys'] = base64_decode($config['system']['ssh']['authorizedkeys']);
 $pconfig['sharednet'] = $config['system']['sharednet'];
 $pconfig['polling_enable'] = isset($config['system']['polling']);
 $pconfig['bypassstaticroutes'] = isset($config['filter']['bypassstaticroutes']);
@@ -101,6 +103,12 @@ if ($_POST) {
 			$input_errors[] = "You must specify a valid port number";
 		}
 	}
+	if($_POST['sshdkeyonly'] == "yes") {
+		$config['system']['ssh']['sshdkeyonly'] = "enabled";
+	} else {
+		unset($config['system']['ssh']['sshdkeyonly']);
+	}		
+	$config['system']['ssh']['authorizedkeys'] = base64_encode($_POST['authorizedkeys']);
 
 }
 
@@ -305,6 +313,13 @@ include("head.inc");
 				<strong>Enable Secure Shell</strong>
 			</td>
 		</tr>
+ 		<tr>
+			<td width="22%" valign="top" class="vncell">&nbsp;</td>
+			<td width="78%" class="vtable">
+				<input name="sshdkeyonly" type="checkbox" id="sshdkeyonly" value="yes" <?php if (isset($pconfig['sshdkeyonly'])) echo "checked"; ?> onclick="enable_change(false)" />
+				<strong>Disable Passwordlogin for Secure Shell (KEY only)</strong>
+			</td>
+		</tr>
 		<tr>
 			<td width="22%" valign="top" class="vncell">SSH port</td>
 			<td width="78%" class="vtable">
@@ -314,6 +329,14 @@ include("head.inc");
 			</td>
 		</tr>
 		<tr>
+			<td width="22%" valign="top" class="vncell"><?=gettext("Authorizedkeys");?></td>
+			<td width="78%" class="vtable">
+				<textarea name="authorizedkeys" cols="65" rows="7" id="authorizedkeys" class="formfld_cert"><?=htmlspecialchars($pconfig['authorizedkeys']);?></textarea>
+				<br />
+				Paste an authorized keys file here.
+ 			</td>
+		</tr>
+		<tr>
 			<td width="22%" valign="top">&nbsp;</td>
 			<td width="78%">
 				<input name="Submit" type="submit" class="formbtn" value="Save" onclick="enable_change(true)" />
-- 
cgit v1.1