new-install

commit 503faa6332911b693d6fa1a7cd6475ed7825af4a
parent 65c90dd375084140511608588cd0d69b56d3ba64
Author: Chris Bracken <chris@bracken.jp>
Date:   Tue,  2 Jun 2020 14:15:53 -0700

Ubuntu: disable password/challenge-response auth

Diffstat:
M
ubuntu_install.md
 | 
13
+++++++++++++

1 file changed, 13 insertions(+), 0 deletions(-)
diff --git a/ubuntu_install.md b/ubuntu_install.md
@@ -56,6 +56,19 @@ Next we'll purge any leftover config files from any removed packages:
     dpkg -l | grep '^rc '| awk '{print $2}' | xargs sudo dpkg -P
 
 
+Disable password/challenge-response ssh
+---------------------------------------
+
+Edit `/etc/ssh/sshd_config` to set the following:
+
+    PasswordAuthentication no
+    ChallengeResponseAuthentication no
+
+Then restart sshd with:
+
+    sudo systemctl restart ssh
+
+
 Configure the system
 --------------------