I have just set-up a new web server using Ubuntu 12.04 and configured it to allow remote connections so that I will be able to configure the machine remotely. One thing that I have noticed is that for some reason, I am able to connect to the console session of the machine without a password. This is not good. If I can connect without a password, that means someone else can.
What do I need to change to make sure that users cannot login to the Linux Ubuntu 12.04 web server without using a password?