Disable ssh Password Logon on CentOS7
Modify the SSH configuration file
Location of the SSH configuration file:/etc/ssh/sshd_config
Find the parameter configuration:
PasswordAuthentication: Change the two parameter values to no: PasswordAuthentication no
It is said that a ChallengeResponseAuthentication is changed to no. The default value is no, but I changed to yes and tried it. You can also log on.
This parameter "whether to allow question-Answer authentication", but does not understand what it means.
And restart the SSH service.
Note: The Restart service of CentOS7 is different from the previous one.
# Systemctl restartsshd. service
Now we have restricted the user's SSH Login method, and only allow key login. For further test, if we try to log on with a machine without a trusted key, the following message is displayed.
Permission denied (publickey, gssapi-keyex, gssapi-with-mic ).
The SSH logon method is successfully restricted.