Child pages
  • SSH Password Authorization Tweak

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Include Page
LIB:_Version
LIB:_Version

(WHM >> Home >> Security Center >> SSH Password Authorization Tweak)

Table of Contents
stylenone

Overview

This feature allows you to enable or disable password authorization for SSH authentication. If you disable password authorization, the system forces users to use SSH keys when they access your server through SSH.

How to manage SSH passwords

Click Enable Password Auth to enable SSH passwords, or click Disable Password Auth to disable them.

The system uses two keys in the SSH daemon configuration file (/etc/sshd_config) to store password authorization status:

Password AuthenticationPasswordAuthenticationChallengeResponseAuthentication
enabledyesyes
disablednono


Warning
titleWarning:
  • If you enable this feature, the system restarts the SSH service and disconnect all of the connected users. This includes the root user.
  • Password Authorization settings also apply to the root user. Use WHM's    Manage root's SSH Keys interface (WHM >> Home >> Security Center >> Manage root's SSH Keys) to create the root user's SSH keys.
  • If you disable the  Password Authorization setting, your users must use SSH keys. Use WHM's Manage root's SSH Keys interface (WHM >> Home >> Security Center >> Manage root's SSH Keys) to create users' SSH keys.

Additional documentation

Localtab Group


Localtab
activetrue
titleSuggested documentation

Content by Label
showLabelsfalse
max5
showSpacefalse
cqllabel in ("ssh") and label = "whm" and space = currentSpace()


Localtab
titleFor cPanel users

Content by Label
showLabelsfalse
max5
showSpacefalse
cqllabel in ("ssh") and label = "cpanel" and space = currentSpace()


Localtab
titleFor WHM users

Content by Label
showLabelsfalse
max5
showSpacefalse
cqllabel in ("ssh") and label = "whm" and space in (currentSpace(),"CKB")


Localtab
titleFor developers

Content by Label
showLabelsfalse
max5
showSpacefalse
cqllabel = "ssh" and space = "DD"