Skip to content

Secure My VPS guide doesn't contain full instructions to disable password logins #4595

@rxall

Description

@rxall

By default on a fresh ubuntu VPS install, Include /etc/ssh/sshd_config.d/*.conf (L12) is included within /etc/ssh/sshd_config.

/etc/ssh/sshd_config.d/50-cloud-init.conf contains the setting PasswordAuthentication Yes

This overrides the setting within /etc/ssh/sshd_config

A user following the Secure My VPS guide step by step won't actually be disabling password logins where the guide would lead them to believe they have.

Afterwards, connections to your server via root user (`ssh root@IPv4_of_your_VPS`) will be rejected.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions