Question
How to allow password authentication for non-root users? (Root still pubkey only)
- Posted June 25, 2020
- Security
I’m wondering if it’s possible to do as mentioned in title.
I want root to still not allow password, but a user is allowed to do so.
The reason is because I need to setup Github Action auto-deployment using https://github.com/sebastianpopp/git-ftp-action and the script is bugged to only allow SSH password.
Thanks
Subscribe
Share
Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Sign in to AnswerThese answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Hello, @hrsetyono
What you can do is to tweak the ssh config file and allow only PubKey authentication for the root username and have the
PasswordAuthenticationfor the other users enabled.You can use
Matchin thesshd_configand then restart the ssh daemon.
Hope that this helps!
Regards, Alex
So I’m thinking of a hacky solution. After changing the
PasswordAuthenticationtoyes, what if I simply do not set the root password?That way nobody know the password and my root is still basically secured to PubKey only.
But is there such thing as default root password? If there is, how strong is it?