new-install

commit b480bc7360a8be4116a6849cf93e5bf4609e5b2c
parent e6d4be2a61e63182d91f7a7a2af515fd485dd8cd
Author: Chris Bracken <chris@bracken.jp>
Date:   Wed, 22 Apr 2020 22:09:09 -0700

Disable ChallengeResponseAuthentication in sshd

In practice, this is basically just password authentication.

Diffstat:
M
freebsd_install.md
 | 
4
++--

1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/freebsd_install.md b/freebsd_install.md
@@ -256,8 +256,8 @@ forward root's mail to a local user. To do so:
    find your public key in `~/.ssh/id_rsa.pub` on the existing host you want to
    connect from.
 1. Edit `/etc/ssh/sshd_config` to disable password-based authentication, and
-   allow only key-based authentication by commenting out the
-   `PasswordAuthentication yes` line.
+   allow only key-based authentication by setting `PasswordAuthentication` and
+   `ChallengeResponseAuthentication` to `no`.
 1. Restart the sshd server to pick up the config change.
    ```
    sudo service sshd restart