Jafner/homelab
1
1
Fork 0
Code Issues 15 Pull Requests Actions Packages Projects Releases Wiki Activity

Document removal of 2FA for SSH

Browse Source
This commit is contained in:
Joey Hafner 2024-02-13 10:49:23 -08:00
parent 199429ac25
commit e1cb3f5f2e
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/Security.md
View File

@ -113,6 +113,12 @@ Note: SSH root login will be disabled implicitly by requiring pubkey authenticat
https://www.digitalocean.com/community/tutorials/how-to-set-up-multi-factor-authentication-for-ssh-on-ubuntu-16-04
### Disabling 2FA
Some use cases (such as programmatic access) demand 2FA be disabled.
Some day we'll figure out how to allow specific keys to bypass the 2FA requirement. But until then,
Edit the file `/etc/ssh/sshd_config` as root. Set `UsePAM` from `yes` to `no`.
### SSH Key Management
The process for managing SSH keys should work as follows: