Block password authetication on specific user on Linux

Hi,
I need to block password authentication for only specific users on Linux server, and leave key
option only. User can't be blocked to use password for other protocols like ftp

All changes should be done in sshd_config file
For UNIX I use following but it block all users on Linux

PasswordAuthDenyUsers user1 user2 user3
ChallRespAuthDenyUsers  [pam] user1 user2 user3

Thanks
IKeystoneAsked:
Who is Participating?
 
serialbandCommented:
I believe the following should work on your linux system.

Create a group named keyonly and put your users in it.

Then add the following to /etc/ssh/sshd_config

Match Group keyonly
      PasswordAuthentication no
      ChallengeResponseAuthentication yes


You could also just match individual users.
Match User User_Name
0
 
skullnobrainsCommented:
create a group for your user in sshd_conf and deny whatever types of authentication you need in that group
0
 
IKeystoneAuthor Commented:
Can you send me an example ?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.

Advertise Here