Update sshd_config to include PubkeyAuthentication option #88
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Use the AuthenticationMethods configuration directive in the `/etc/ssh/sshd`_config file to specify which authentication methods are to be utilized. [...] Note that each of the requested authentication methods needs to be explicitly enabled using a corresponding configuration directive (such as `PubkeyAuthentication`) in the `/etc/ssh/sshd_config` file. https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-encryption-data_in_motion-secure_shell-multi_auth_methods#sect-Security_Guide-Encryption-Data_in_Motion-Secure_Shell-Multi_Auth_Methods Signed-off-by: Stefan Venz <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Thanks a lot for your work.
During a semi-recent install of fedora 40 (just shortly before the 41 release) I encountered an issue, that I just could not access the unlock shell. After some fiddeling I found out, that the
PubkeyAuthenticationneeds to be set toyesto makeit work. I found the RedHat documentation which mentions that the value has to be set explicitly.
"Use the AuthenticationMethods configuration directive in the
/etc/ssh/sshd_config file to specify which authentication methods are to be utilized. [...] Note that each of the requested authentication methods needs to be explicitly enabled using a corresponding configuration directive (such asPubkeyAuthentication) in the/etc/ssh/sshd_configfile."Also the sshd_config(5) manual supports that in the
AuthenticationMethodsblock."Note that each authentication method listed should also be explicitly enabled in the configuration."
Interestingly this is not an issue on system that have been running for a while. I could reproduce the issue between multiple Fedora 40 installs.