SSH Allow Password For One User, Rest Only Allow Public Keys

Question

Is it possible with ssh to allow passwords from a certain user, but deny using passwords for everybody else?

Basically I want to allow password auth for user justin but everybody else must use public keys.

PasswordAuthentication no

Seems to be global though, no way to specify by user.

Why? If you're the administrator of the server, your account ought to be protected just as much as the rest of the users, if not more so.
This question how to disable SSH login with password for some users? has the answer you want.
When I try and use the match syntax, Match User justin PasswordAuthentication yes I am getting Bad configuration option: Match when I restart sshd.
CentOS 5.6, looks to be: OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008. There inst an update in yum.

cjc · Answer 1 · 2011-09-01 22:42:00Z

up vote 1 down vote

Look at the sshd_config man page, and look at the section for the Match directive.

answered Sep 1 '11 at 22:42

cjc
10.5k1415

feedback

1 Answer