Gavin Pearce

I have a user that I wanted to setup so they can only login using a key, and not a password. However I have another user who needed to login using a password, and not a key.

I can achieve this by using the ‘Match’ directive in /etc/ssh/sshd_config.

add to sshd_config:

Match User someuser
PasswordAuthentication no

This will mean that when the ’someuser’ user tries to log in, it will not accept password based authentication, but public key based authentication will work.

You should append this to the end of the configuration file and reload the SSH service afterwards with ’service sshd reload’.