server/user-documentation
10
3
Fork 8
Code Issues Pull requests 2 Projects Activity
user-documentation/modules/ROOT/partials/installation/post-install/disable-password-login.adoc
Brett Weir 152643145e Fix typographical errors in partials 
Assisted-by: OpenCode:gpt-oss-120b
2026-07-12 23:51:25 -07:00

1.1 KiB
Raw Permalink Blame History

  1. On the server, create a configuration file and edit

    […]# vi /etc/ssh/sshd_config.d/60-local.conf

# Local customization: disable password login except for
# one (optionally add some more) user as a fallback option.
PasswordAuthentication no

Match User hostmin
    PasswordAuthentication yes
#Match User hostmin2
#    PasswordAuthentication yes

  2. Reload the sshd daemon

    […]# systemctl reload sshd

  3. Test that everything works as expected

    • Is an authorized user able to log in?

    • Are other users rejected with the message "Permission denied (publickey,gssapi-keyex,gssapi-with-mic)"?

    • If this does not work and/or other users are able to log in with a password besides your known authorized user,

      • install the latest updates.

      • check the file /etc/ssh/sshd_config.d/50-redhat.conf to make sure that it does not include the line "PasswordAuthentication yes" (as this is already the default and should not be repeated or else it could hinder other configurations).