Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I configure the OpenSSH server (on Ubuntu) to allow keyboard-interactive but not password authentication?

I know that public-key-authentication is the preferred one, but I want to test a user setup.

share|improve this question
keyboard-interactive but not password authentication? Can you rephrase that? – BennyInc Sep 20 '11 at 11:56
@BennyInc try looking at AuthenticationMethod in sshd_config it looks like they are distinct. – barlop Dec 8 '14 at 3:12
up vote 2 down vote accepted

Set ChallengeResponseAuthentication=yes in your sshd.conf I think

share|improve this answer

You need to configure PAM for use with OPIE or OTPW, depending on your Ubuntu version. Once you have a one-time password system in place and properly configured via the /etc/pam.d/sshd module, then you can setup SSH to make use of it.

# /etc/ssh/sshd_config
PasswordAuthentication no
ChallengeResponseAuthentication yes

Don't forget to reload SSH after making changes to the configuration file; otherwise, your changes will not take effect.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .