Elektrine lite

← Feed

@paulehoffman@infosec.exchange

Post #3498730

2026-06-28 23:38 UTC

This could turn into a trash fire, but I'll keep my fingers crossed. I have a new VM that allows me to SSH to account "a" using a's public key just fine. I have created account "b" for someone who is unlikely to be able to use public keys in the long term, but has a good password. When logged in as "a", I can "su b" and use their password just fine. There are a million similar-sounding options in /etc/ssh/sshd_config for "allow people to use passwords". The one that was suggested to me didn't work. Further, there are three files in /etc/ssh/sshd_config.d that have instructions that do/don't/might override /etc/ssh/sshd_config. Is anyone here *sure* they know how to allow password login over SSH, and which file(s) I set it in? I understand this might require setting a few things in multiple files. I am OK with allowing passwords for all users because I will set an absurdly strong password for "a" that I will immediately forget, forcing me to use public key anyhow. I promise to post the first answer that works. And to keep it in my notes file for such things....

Replies (1)

  • A final follow-up based on what @kasperd@westergaard.social pointed me to: I'm giving up on passwords for the novice user. I'll create a keypair for them, I'll wrap it in a password (the same one I was going to have them use to SSH in), and then I have to explain how/where to store it on their computer and how to use it when logging in. Once I stop weeping about "the way things are today", I'll probably write up a guide for people who have to get novice users to use SSH and SFTP.

    Open ##3498729