Re: User at host

> What im wondering is, how can i make it so a user+public key will only
> authenticate if the connection is coming from a certain host?
>
> ie: user joe can come from anywhere, pending they have joes.ppk
>
> user jim can only come from 10.10.10.10/32 pending they have jims.ppk

Does your SSH server allow password authentication, or only public key 
exchanges?

If your SSH server allows only key exchanges, you can modify/lock down 
their authorized keys file as so:

from="allowed_host" ssh-rsa ......

If your SSH server allows other types of authentication you can use the 
pam_access module as so:

Create a file with the following contents:

-:jim:ALL EXCEPT <authorized host(s)>

Add the line: "account     required      pam_access.so 
accessfile=</path/to/file/created/in/previous/step>

(above line must be a solid line, it should not wrap)

above other account restrictions in /etc/pam.d/sshd

As always when working with PAM, I recommend a backup of any file you will 
be changing and 2 root logged in terminal sessions!

Good Luck!

Barry