9

How can I configure the OpenSSH server (on Ubuntu) to allow keyboard-interactive but not password authentication?

I know that public-key-authentication is the preferred one, but I want to test a user setup.

Improve this question
2
  • keyboard-interactive but not password authentication? Can you rephrase that?
    – BennyInc
    Sep 20, 2011 at 11:56
  • @BennyInc try looking at AuthenticationMethod in sshd_config it looks like they are distinct.
    – barlop
    Dec 8, 2014 at 3:12

2 Answers 2

Reset to default
7

Set 

ChallengeResponseAuthentication=yes

in your sshd.conf

Improve this answer
8

You need to configure PAM for use with OPIE or OTPW, depending on your Ubuntu version. Once you have a one-time password system in place and properly configured via the /etc/pam.d/sshd module, then you can setup SSH to make use of it.

# /etc/ssh/sshd_config
PasswordAuthentication no
ChallengeResponseAuthentication yes

Don't forget to reload SSH after making changes to the configuration file; otherwise, your changes will not take effect.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .