Our Server has disabled password-based ssh login and only works with publickey. When I add new users with adduser, it prompts for a password however and I cannot leave it empty. When I generate a random one and mail it to users, even with the notice that they don't need it, people get confused and write me mails that they can't login with their password.
So what is best practise here?
- set the password once, forget it and and don't tell them
- use a different command to create a user with no password at all
- continue giving them the password in case they need it for something (e.g. get sudo access later which is unlikely however)