0

Is it possible to allow the user to use Public Key and Password to authenticate to their ssh account (Have both options enabled rather just one or the other)?

If it possible, how to do so?

5
  • 1
    Yes - in fact this is the default unless you change it. – Milliways Dec 24 '18 at 21:12
  • @Milliways thanks so I can use both Password and Public Key for authentication? – zhiyan114 Dec 24 '18 at 22:07
  • 1
    yes - in fact that's what the yes in his comment means – Jaromanda X Dec 24 '18 at 22:22
  • @JaromandaX Also how do I do it? (i.e. which sshd config would I need to modify) – zhiyan114 Dec 24 '18 at 22:38
  • 2
    don't change any config ... just add authorized_keys ... as milliways explained this is the default unless you change it – Jaromanda X Dec 24 '18 at 23:22
1

As already stated in the comments password and public key authentication are enabled by default. If you enable ssh and know the name resp. ip address of the RasPi you can just connect to it with user pi and password raspberry. You can also use public key authentication out of the box. Just install public and private keys as described for ssh. You can find an example at Unable to SSH after securing Pi.

1

While out of the box the Pi is using passwords, and public keys in the sense of host keys, I think what he is asking is if you can continue to use password authentication AFTER you setup user public key authentication.

Once you do so, then there is no need for the less secure password authentication, and the whole point of setting that up is to not need to stop and enter a password, which can be brute force attacked to begin with.

So, there is no need to do such a thing.

Check out "SSH Mastery" by Michael W. Lucas for more detail.

2
  • The need is a rather subjective thing to start with. There are situations conceivable where a user wants to set up public key authentication for convenience only and not security (as in, simplified log in process, typing no password); but still keeping password auth. to log in from another machine w/o the keyfile. Not judging whether this is a wise thing to do or not, just saying there might be a need. – Ghanima Jan 6 '19 at 17:36
  • Given that password protection is an inferior level of protection, it would completely nonsensical, and thus by definition would not be "needed". Logic. :) – patrick Jan 8 '19 at 2:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.