Hacker News new | ask | show | jobs
by ncmncm 1660 days ago
That is not the whole job on /etc/ssh/sshd_config. You also need

  ChallengeResponseAuthentication no
1 comments

why?
Because in the most common use-case it allows for the the same functionality as PasswordAuthentication, so if you want to disallow password-based logins, it also has to go. Note that newer openssh version (don't remember how new) renamed this to KbdInteractiveAuthentication. So check your documentation, and double-check everything you read on the internet.

This article is from 2013 after all.