Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That is not the whole job on /etc/ssh/sshd_config. You also need

  ChallengeResponseAuthentication no


why?


Because in the most common use-case it allows for the the same functionality as PasswordAuthentication, so if you want to disallow password-based logins, it also has to go. Note that newer openssh version (don't remember how new) renamed this to KbdInteractiveAuthentication. So check your documentation, and double-check everything you read on the internet.

This article is from 2013 after all.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: