ovh / docs

Official repository containing all docs & guides of OVH Group

Home Page:https://docs.ovh.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Secure My VPS guide doesn't contain full instructions to disable password logins

rxall opened this issue · comments

commented

By default on a fresh ubuntu VPS install, Include /etc/ssh/sshd_config.d/*.conf (L12) is included within /etc/ssh/sshd_config.

/etc/ssh/sshd_config.d/50-cloud-init.conf contains the setting PasswordAuthentication Yes

This overrides the setting within /etc/ssh/sshd_config

A user following the Secure My VPS guide step by step won't actually be disabling password logins where the guide would lead them to believe they have.

Afterwards, connections to your server via root user (`ssh root@IPv4_of_your_VPS`) will be rejected.