Re: site-to-site VPN with credential prompts?

[Jeffrey Walton <noloader@gmail.com>]

On Tue, Mar 25, 2025 at 4:46 PM <tomas@tuxteam.de> wrote:
>
> On Tue, Mar 25, 2025 at 01:58:27PM -0400, Timothy M Butterworth wrote:
>
> [...]
>
> > It is not that SSH is less secure, it is that crackers attempt to brute
> > force SSH servers [...]
>
> You still use passwords?

++.

$ cat /etc/ssh/sshd_config.d/10-pubkey_auth.conf
# Disable passwords
PasswordAuthentication no
ChallengeResponseAuthentication no
KerberosAuthentication no
KerberosOrLocalPasswd no
GSSAPIAuthentication no
UsePAM no
# Enable public key
PubkeyAuthentication yes

$ cat /etc/ssh/sshd_config.d/20-no_root_login.conf
PermitRootLogin no

Jeff