diff options
| author | Xiao Pan <gky44px1999@gmail.com> | 2023-07-31 20:18:11 -0700 |
|---|---|---|
| committer | Xiao Pan <gky44px1999@gmail.com> | 2023-07-31 20:19:35 -0700 |
| commit | 64b74deeb1cf1fc23d11d3f11b520425855e3d7f (patch) | |
| tree | fa69dbdcfc6545e56d2a4b174184aebb1b17a34c | |
| parent | fa4807ca828ece7b1e724583b8f6ca6c0cc3bdcd (diff) | |
sshd_config use `AuthenticationMethods publickey` for redundancy, think about what if they changed some defaults auth method from no to yes
| -rw-r--r-- | etc/ssh/sshd_config | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/ssh/sshd_config b/etc/ssh/sshd_config index fb66c21d..f66c0efd 100644 --- a/etc/ssh/sshd_config +++ b/etc/ssh/sshd_config @@ -114,3 +114,7 @@ Subsystem sftp /usr/lib/ssh/sftp-server # AllowTcpForwarding no # PermitTTY no # ForceCommand cvs server + +# Based on manpage, setting PasswordAuthentication no, and default KbdInteractiveAuthentication no, with other defaults seems already equivalent to AuthenticationMethods publickey, but I still put it here for redundancy. +# https://wiki.archlinux.org/title/OpenSSH#Force_public_key_authentication +AuthenticationMethods publickey |