Disable ssh Password Logon on CentOS7

Disable ssh Password Logon on CentOS7

Modify the SSH configuration file

Location of the SSH configuration file:/etc/ssh/sshd_config

Find the parameter configuration:

PasswordAuthentication: Change the two parameter values to no: PasswordAuthentication no

It is said that a ChallengeResponseAuthentication is changed to no. The default value is no, but I changed to yes and tried it. You can also log on.

This parameter "whether to allow question-Answer authentication", but does not understand what it means.

And restart the SSH service.

Note: The Restart service of CentOS7 is different from the previous one.

# Systemctl restartsshd. service

Now we have restricted the user's SSH Login method, and only allow key login. For further test, if we try to log on with a machine without a trusted key, the following message is displayed.

Permission denied (publickey, gssapi-keyex, gssapi-with-mic ).

The SSH logon method is successfully restricted.