Re: [gentoo-user] Disabling ssh password login on all accounts?

2020-08-11 Thread Neil Bothwick
On Tue, 11 Aug 2020 15:14:35 -0400, Walter Dnes wrote: > Match Address !192.168.1.0/24 > DenyUsers * > > One more question... does sshd_config follow the python convention > that indentinting with spaces or tabs denotes a "block"? No, the Match line defines the start of a block that cont

Re: [gentoo-user] Disabling ssh password login on all accounts?

2020-08-11 Thread Walter Dnes
On Tue, Aug 11, 2020 at 01:51:59PM +0100, Victor Ivanov wrote > Yes that's one of the options you need to disable. The other one is > "ChallengeResponseAuthentication" which will also disable PAM-based > authentication (which may include passwords). So you should have the > following global settin

Re: [gentoo-user] Disabling ssh password login on all accounts?

2020-08-11 Thread Gerrit Kuehn
On Tue, 11 Aug 2020 06:21:26 -0400 "Walter Dnes" wrote: > # To disable tunneled clear text passwords, change to no here! > #PasswordAuthentication yes > > Is that correct? If not, what is the correct setting to change? You might also want to set to "No" the following ones: ChallengeRespons

Re: [gentoo-user] Disabling ssh password login on all accounts?

2020-08-11 Thread Victor Ivanov
On 11/08/2020 11:21, Walter Dnes wrote: > The one sevice I have listening for external connections on my laptop > is sshd (192.168.1.0/24). Before taking it anywhere, I want to prohibit > password-based login for *ALL* accounts, not just root. This would > require users to be listed in ~/.ssh/a

[gentoo-user] Disabling ssh password login on all accounts?

2020-08-11 Thread Walter Dnes
The one sevice I have listening for external connections on my laptop is sshd (192.168.1.0/24). Before taking it anywhere, I want to prohibit password-based login for *ALL* accounts, not just root. This would require users to be listed in ~/.ssh/authorized_keys Looking through /etc/ssh/sshd_co